STIGQter: STIG Summary: AvePoint Fly Server Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Apr 2026:

Fly Server must enforce a minimum 15-character password length.

DISA Rule

SV-283929r1206891_rule

Vulnerability Number

V-283929

Group Title

SRG-APP-000164

Rule Version

FLYS-00-000065

Severity

CAT II

CCI(s)

CCI-004066 - For password-based authentication, enforce organization-defined composition and complexity rules.

Weight

Fix Recommendation

Configure the Fly Server Account Manager setting to ensure AD Integration or AAD Integration is enabled:
- Log on to Fly Server with an admin account.
- On the Management >> Account Manager page, click "Authentication Manager".
- Navigate to AD Integration or AAD Integration.
- Set the Action of AD Integration or AAD Integration to "Enable".
- Add an AD domain after AD integration is enabled.
- Save the setting.

Add AD user/group or AAD user/group to Account Manager; realize automated mechanisms through AD or AAD account management functions.

Check Contents

Fly Server must be integrated with Active Directory (AD) and Azure AD (AAD) for automated account management.

Check the Fly Server Account Manager setting to verify AD Integration or AAD Integration is enabled:
- Log on to Fly Server with an admin account.
- On the Management >> Account Manager page, click "Authentication Manager".
- Navigate to AD Integration or AAD Integration.
- Verify the AD Integration or AAD Integration option is enabled.

If the AD Integration or AAD Integration option is not enabled, this is a finding.

Vulnerability Number

V-283929

Documentable

False

Rule Version

FLYS-00-000065

Severity Override Guidance

Check Content Reference

Target Key

5747