Hardening Password Rules

TinggiLevel 1Otomatisaruba-cx

Deskripsi

It is critical that customers set good, strong passwords for their local user accounts. The password complexity feature can aid customers in ensuring that users are following company password policies. PASS requires the password complexity context to be enabled with minimum-length of 8 or more (the CIS sample policy); also confirm lowercase/uppercase/special/numeric counts and history-count of at least 1. Audited against AOS-CX 'show running-config' output (saved in full); context blocks such as 'password complexity' or 'cli-session' are matched by their indented member lines.

Cara pemeriksaan

Metode audit: Pola konfigurasi

Pola: (?m)^password complexity[ \t]*\n(?:(?:[ \t]+[^\n]*\n)*?[ \t]+minimum-length (?:[89]|[1-9]\d)[ \t]*\n(?:[ \t]+[^\n]*\n)*?[ \t]+enable[ \t]*$|(?:[ \t]+[^\n]*\n)*?[ \t]+enable[ \t]*\n(?:[ \t]+[^\n]*\n)*?[ \t]+minimum-length (?:[89]|[1-9]\d)[ \t]*$)

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

password complexity minimum-length 8 lowercase-count 1 uppercase-count 1 special-char-count 1 numeric-count 1 history-count 1 enable # CIS guidance: Set a password complexity policy with a minimum of <X> characters long, includes at least <Y> lowercase/uppercase/special/numeric character, and doesn't allow users to reuse the past <Z> passwords: password complexity minimum-length <X> lowercase-count <Y> uppercase-count <Y> special-char-count <Y> numeric-count <Y> history-count <Z> enable Sample recommended password complexity configuration based on https://www.cisecurity.org/insights/white-papers/cis-password-policy-guide password complexity minimum-length 8 lowercase-count 1 uppercase-count 1 special-char-count 1 numeric-count 1 history-count 1 enable

Properti

Sistem operasi: Apa saja
Tag: aruba-cxauthentication
Referensi: CIS HPE Aruba Networking CX Switch Benchmark v1.0.1 - 1.1.3 Hardening Password Rules

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

shell

tmaegis scan --target aruba-cx