STIGQter: STIG Summary: Nokia Service Router OS 25.x Network Device Management Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Apr 2026:

The Nokia router must be configured to enforce the limit of three consecutive invalid logon attempts, after which time it must block any login attempt for 15 minutes.

DISA Rule

SV-283763r1203595_rule

Vulnerability Number

V-283763

Group Title

SRG-APP-000065-NDM-000214

Rule Version

NOKI-ND-000120

Severity

CAT II

CCI(s)

• CCI-000044 - Enforce the organization-defined limit of consecutive invalid logon attempts by a user during the organization-defined time period.

Weight

10

Fix Recommendation

Configure the Nokia router using the command below:

- configure system security password attempts 3 lockout 15

Check Contents

Verify that "Number of invalid attempts permitted per login" is set to "3", and "Lockout period (when threshold breached)" is set to "15", as shown in the example below:

- show system security password-options

Number of invalid attempts permitted per login : 3
Lockout period (when threshold breached) : 15

If the "Number of invalid attempts permitted per login" is not set to "3", this is a finding.

If the "Lockout period (when threshold breached)" is not set to "15", this is a finding.

Vulnerability Number

V-283763

Documentable

False

Rule Version

NOKI-ND-000120

Severity Override Guidance

Verify that "Number of invalid attempts permitted per login" is set to "3", and "Lockout period (when threshold breached)" is set to "15", as shown in the example below:

- show system security password-options

Number of invalid attempts permitted per login : 3
Lockout period (when threshold breached) : 15

If the "Number of invalid attempts permitted per login" is not set to "3", this is a finding.

If the "Lockout period (when threshold breached)" is not set to "15", this is a finding.

Check Content Reference

M

Target Key

5744