STIGQter STIGQter: STIG Summary: Trend Micro Deep Security 9.x Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 Feb 2016:

Trend Deep Security must enforce a 60-day maximum password lifetime restriction.

DISA Rule

SV-80415r1_rule

Vulnerability Number

V-65925

Group Title

SRG-APP-000174

Rule Version

TMDS-00-000165

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Configure the Trend Deep Security server to enforce a 60 day maximum password lifetime restriction.

Configure the policy value for maximum password lifetime.

Under the Administration >> System Settings >> Security tab, set the value for “User password expires” to 60.

Check Contents

Review the Trend Deep Security server configuration to ensure a 60 day maximum password lifetime restriction is enforced.

Verify the policy value for minimum password length.

If the value for “User password expires” under the Administration >> System Settings >> Security tab is not set to 60 Days, this is a finding.

Vulnerability Number

V-65925

Documentable

False

Rule Version

TMDS-00-000165

Severity Override Guidance

Review the Trend Deep Security server configuration to ensure a 60 day maximum password lifetime restriction is enforced.

Verify the policy value for minimum password length.

If the value for “User password expires” under the Administration >> System Settings >> Security tab is not set to 60 Days, this is a finding.

Check Content Reference

M

Target Key

2955

Comments