Ensure Allow access again after time is set to 300 or more second

MediaNivel 2Automatizadapfsense

Descripción

Account password lockout >= 300 seconds. Allow access again after a user has been locked out (due to failed login attempts). The user is allowed access after the configured time if there have been no login attempts during that time). PASS requires the Login Protection blocktime (<sshguard_blocktime>) of 300 seconds or more. Audited against the pfSense config.xml (Diagnostics > Backup & Restore > Download configuration, or /cf/conf/config.xml).

Cómo se verifica

Método de auditoría: Patrón de configuración

Patrón: <sshguard_blocktime>(?:[3-9]\d\d|\d{4,})</sshguard_blocktime>

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

GUI: System > Advanced > Admin Access > Login Protection > Blocktime = 300, Save. # CIS guidance: In GUI: - Navigate to System > Advanced > Admin Access - set the 'Login Protection' options. - set 'Blocktime' value to 300. - CLIck Save

Propiedades

Sistemas operativos: Cualquiera
Etiquetas: pfsensetime
Referencia: CIS pfSense Firewall Benchmark v1.1.0 - 3.3 Ensure Allow access again after time is set to 300 or more second

Verificar este host

Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.

shell

tmaegis scan --target pfsense --level 2