STIGQter: STIG Summary: HP FlexFabric Switch NDM Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 24 Jul 2020:

Upon successful logon, the HP FlexFabric Switch must notify the administrator of the number of unsuccessful logon attempts since the last successful logon.

DISA Rule

SV-80653r1_rule

Vulnerability Number

V-66163

Group Title

SRG-APP-000076-NDM-000218

Rule Version

HFFS-ND-000019

Severity

CAT II

CCI(s)

• CCI-000053 - The information system notifies the user, upon successful logon/access, of the number of unsuccessful logon/access attempts since the last successful logon/access.
• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Configure the HP FlexFabric Switch to notify the administrator of the date and time of the last unsuccessful logon:

[HP] password-control enable

Check Contents

Determine if the HP FlexFabric Switch is configured to notify the administrator of the date and time of their last logon. Once the logon credentials have been entered the system should display the previous logon information for the user:

Log on as: admin
admin@15.252.78.64's password:
Your logon failures since the last successful logon:
Wed May 27 10:06:04 2015
Wed May 27 10:06:09 2015

Last successfully logon time: Wed May 27 10:45:51 2015

If the administrator is not notified of the date and time of the last logon upon successful logon, this is a finding.

Vulnerability Number

V-66163

Documentable

False

Rule Version

HFFS-ND-000019

Severity Override Guidance

Determine if the HP FlexFabric Switch is configured to notify the administrator of the date and time of their last logon. Once the logon credentials have been entered the system should display the previous logon information for the user:

Log on as: admin
admin@15.252.78.64's password:
Your logon failures since the last successful logon:
Wed May 27 10:06:04 2015
Wed May 27 10:06:09 2015

Last successfully logon time: Wed May 27 10:45:51 2015

If the administrator is not notified of the date and time of the last logon upon successful logon, this is a finding.

Check Content Reference

M

Target Key

2971

Comments