Ensure 'Minimum Password Complexity' is enabled

Méthode de vérification

Méthode d'audit: Motif de configuration

Motif

(?m)^set mgt-config password-complexity enabled yes[ \t]*$

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

configure set mgt-config password-complexity enabled yes set mgt-config password-complexity block-username-inclusion yes commit # CIS guidance: Navigate to Device > Setup > Management > Minimum Password Complexity. Set Enabled to be checked Set that the various password settings to values that are appropriate to your organization. It is suggested that there at least be some special characters enforced, and that a minimum length be set. Ensure that non-zero values are set for Minimum Uppercase, Lowercase and Special Characters. "Block Username Inclusion" should be enabled. Operationally, dictionary words should be avoided for all passwords - passphrases are a much better alternative.

Vérifier cet hôte

Exécutez cette commande sur une machine que vous êtes autorisé à auditer. L'analyse est en lecture seule.

tmaegis scan --target paloalto