TMA-PALOALTO-1.3.7
Ensure 'Required Password Change Period' is less than or equal to 90 days
Beschreibung
This defines how long a user can use a password before it expires. PASS requires password-change expiration-period between 1 and 90 days. Audited against the PAN-OS running configuration in set format: run 'set cli config-output-format set', then 'configure' and 'show' (or 'show config running') and save the full output.
So wird geprüft
Prüfmethode: Konfigurationsmuster
- Muster
(?m)^set mgt-config password-complexity password-change expiration-period (?:[1-9]|[1-8]\d|90)[ \t]*$
So wird behoben
Behebungsmethode: Anleitung oder Infrastruktur-Patch
configure set mgt-config password-complexity password-change expiration-period 90 commit # CIS guidance: Navigate to Device > Setup > Management > Minimum Password Complexity. Set Required Password Change Period (days) to less than or equal to 90
Eigenschaften
- Betriebssysteme
- Beliebig
- Tags
- paloaltoauthentication
- Referenz
- CIS Palo Alto Firewall 11 Benchmark v1.2.0 - 1.3.7 Ensure 'Required Password Change Period' is less than or equal to 90 days
Diesen Host prüfen
Führen Sie dies auf einem Rechner aus, den Sie prüfen dürfen. Der Scan ist schreibgeschützt.
tmaegis scan --target paloalto