STIGQter: STIG Summary: Symantec Edge SWG NDM Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Apr 2026:

The Edge SWG must require that when a password is changed, the characters are changed in at least eight of the positions within the password.

DISA Rule

SV-279263r1170553_rule

Vulnerability Number

V-279263

Group Title

SRG-APP-000170-NDM-000329

Rule Version

SYME-ND-000650

Severity

CAT II

CCI(s)

• CCI-004066 - For password-based authentication, enforce organization-defined composition and complexity rules.

Weight

10

Fix Recommendation

1. Log in to the Edge SWG SSH CLI.
2. Enter "enable" and "configure terminal".
3. Enter "security password-policy min-changes 8".
4. Enter "security password-policy min-groups 4".

Check Contents

1. Log in to the Edge SWG SSH CLI.
2. Enter "show configuration".
3. Move down the configuration to the "security password-policy" section.

If the configuration "security password-policy min-changes" is not set to "8", this is a finding.

Vulnerability Number

V-279263

Documentable

False

Rule Version

SYME-ND-000650

Severity Override Guidance

1. Log in to the Edge SWG SSH CLI.
2. Enter "show configuration".
3. Move down the configuration to the "security password-policy" section.

If the configuration "security password-policy min-changes" is not set to "8", this is a finding.

Check Content Reference

M

Target Key

5726