Ensure Login Protection Threshold is set to 30 or less

MittelStufe 1Automatisiertpfsense

Beschreibung

The Login Protection Threshold is a score-based system that helps to prevent unauthorized access to the pfSense firewall. This score is based on various criteria, including the number of unsuccessful login attempts from a specific IP address. This control ensures that the Login Protection Threshold is set to a value of 30 or less. PASS requires the Login Protection threshold (<sshguard_threshold>) between 1 and 30. Audited against the pfSense config.xml (Diagnostics > Backup & Restore > Download configuration, or /cf/conf/config.xml).

So wird geprüft

Prüfmethode: Konfigurationsmuster

Muster: <sshguard_threshold>(?:[1-9]|[12]\d|30)</sshguard_threshold>

So wird behoben

Behebungsmethode: Anleitung oder Infrastruktur-Patch

GUI: System > Advanced > Admin Access > Login Protection > Threshold = 30, Save. # CIS guidance: In the GUI: - Navigate to System > Advanced - Set 30 in the 'Login Protection' > 'Threshold' Field - CLIck 'Save'

Eigenschaften

Betriebssysteme: Beliebig
Tags: pfsensehardening
Referenz: CIS pfSense Firewall Benchmark v1.1.0 - 3.2 Ensure Login Protection Threshold is set to 30 or less

Diesen Host prüfen

Führen Sie dies auf einem Rechner aus, den Sie prüfen dürfen. Der Scan ist schreibgeschützt.

shell

tmaegis scan --target pfsense