STIGQter STIGQter: STIG Summary: ForeScout CounterACT NDM Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 12 Sep 2017:

CounterACT must enforce a minimum 15-character password length.

DISA Rule

SV-90891r1_rule

Vulnerability Number

V-76203

Group Title

SRG-APP-000164-NDM-000252

Rule Version

CACT-NM-000030

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

1. Log on to the CounterACT Administrator UI.
2. From the menu, select Tools >> Options >> User Console and Options >> Password and Login.
3. Configure the "minimum length" for "15".
4. Verify additional complexity requirements are also met.

Check Contents

Determine if the network device enforces a minimum 15-character password length. This requirement may be verified by demonstration or configuration review.

1. Log on to the CounterACT Administrator UI.
2. From the menu, select Tools >> Options >> User Console and Options >> Password and Login.
3. Verify the "minimum length" is configured for "15".

If CounterACT does not enforce a minimum 15-character password length, this is a finding.

Vulnerability Number

V-76203

Documentable

False

Rule Version

CACT-NM-000030

Severity Override Guidance

Determine if the network device enforces a minimum 15-character password length. This requirement may be verified by demonstration or configuration review.

1. Log on to the CounterACT Administrator UI.
2. From the menu, select Tools >> Options >> User Console and Options >> Password and Login.
3. Verify the "minimum length" is configured for "15".

If CounterACT does not enforce a minimum 15-character password length, this is a finding.

Check Content Reference

M

Target Key

3225

Comments