STIGQter: STIG Summary: HP FlexFabric Switch NDM Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 24 Jul 2020:

The HP FlexFabric Switch must notify the administrator of the number of successful logon attempts occurring during an organization-defined time period.

DISA Rule

SV-80773r1_rule

Vulnerability Number

V-66283

Group Title

SRG-APP-000516-NDM-000332

Rule Version

HFFS-ND-000129

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.
• CCI-001391 - The information system notifies the user of the number of successful logins/accesses that occur during the organization-defined time period.

Weight

10

Fix Recommendation

Configure the HP FlexFabric Switch to notify the administrator of the date and time of the last unsuccessful logon:

[HP] password-control enable

Check Contents

Determine if the HP FlexFabric Switch notifies the administrator of the number of successful logon attempts occurring during an organization-defined time period. Once the logon credentials have been entered, the system should display the previous logon information for the user:

Log on as: admin
admin@15.252.78.64's password:
Your logon failures since the last successful logon:
Wed May 27 10:06:04 2015
Wed May 27 10:06:09 2015

Last successfully logon time: Wed May 27 10:45:51 2015

If the administrator is not notified of the number of successful logon attempts occurring during an organization-defined time period, this is a finding.

Vulnerability Number

V-66283

Documentable

False

Rule Version

HFFS-ND-000129

Severity Override Guidance

Determine if the HP FlexFabric Switch notifies the administrator of the number of successful logon attempts occurring during an organization-defined time period. Once the logon credentials have been entered, the system should display the previous logon information for the user:

Log on as: admin
admin@15.252.78.64's password:
Your logon failures since the last successful logon:
Wed May 27 10:06:04 2015
Wed May 27 10:06:09 2015

Last successfully logon time: Wed May 27 10:45:51 2015

If the administrator is not notified of the number of successful logon attempts occurring during an organization-defined time period, this is a finding.

Check Content Reference

M

Target Key

2971

Comments