TMA-CHECKPOINT-1.1
Ensure Minimum Password Length is set to 14 or higher
Description
Defines the minimum length a password can be. The minimum number of characters of a password that is to be allowed for users or SNMP users. Does not apply to passwords that have already been set. PASS requires min-password-length of 14 or more. Audited against the Gaia clish 'show configuration' output (run 'show configuration' in clish on each gateway and management server and save the full output).
How it is checked
Audit method: Configuration pattern
- Pattern
(?m)^set password-controls min-password-length (?:1[4-9]|[2-9]\d|1[01]\d|12[0-8])[ \t]*$
How it is fixed
Fix method: Guidance or infrastructure patch
set password-controls min-password-length 14 save config # CIS guidance: Run the following command to set the min-password-length setting. CLI: set password-controls min-password-length 14 GUI: Navigate to User Management > Password Policy Ensure 'Minimum Password Length' is set to 14 or higher.
Properties
- Operating systems
- Any
- Tags
- checkpointauthentication
- Reference
- CIS Check Point Firewall Benchmark v1.1.0 - 1.1 Ensure Minimum Password Length is set to 14 or higher
Check this host
Run this on a machine you are allowed to audit. The scan is read-only.
tmaegis scan --target checkpoint