TMA-PALOALTO-1.3.7
Ensure 'Required Password Change Period' is less than or equal to 90 days
Descripción
This defines how long a user can use a password before it expires. PASS requires password-change expiration-period between 1 and 90 days. Audited against the PAN-OS running configuration in set format: run 'set cli config-output-format set', then 'configure' and 'show' (or 'show config running') and save the full output.
Cómo se verifica
Método de auditoría: Patrón de configuración
- Patrón
(?m)^set mgt-config password-complexity password-change expiration-period (?:[1-9]|[1-8]\d|90)[ \t]*$
Cómo se corrige
Método de corrección: Guía o parche de infraestructura
configure set mgt-config password-complexity password-change expiration-period 90 commit # CIS guidance: Navigate to Device > Setup > Management > Minimum Password Complexity. Set Required Password Change Period (days) to less than or equal to 90
Propiedades
- Sistemas operativos
- Cualquiera
- Etiquetas
- paloaltoauthentication
- Referencia
- CIS Palo Alto Firewall 11 Benchmark v1.2.0 - 1.3.7 Ensure 'Required Password Change Period' is less than or equal to 90 days
Verificar este host
Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.
tmaegis scan --target paloalto