Hardening Password Rules

高レベル 1自動aruba-cx

説明

It is critical that customers set good, strong passwords for their local user accounts. The password complexity feature can aid customers in ensuring that users are following company password policies. PASS requires the password complexity context to be enabled with minimum-length of 8 or more (the CIS sample policy); also confirm lowercase/uppercase/special/numeric counts and history-count of at least 1. Audited against AOS-CX 'show running-config' output (saved in full); context blocks such as 'password complexity' or 'cli-session' are matched by their indented member lines.

チェック方法

監査方法: 設定パターン

パターン: (?m)^password complexity[ \t]*\n(?:(?:[ \t]+[^\n]*\n)*?[ \t]+minimum-length (?:[89]|[1-9]\d)[ \t]*\n(?:[ \t]+[^\n]*\n)*?[ \t]+enable[ \t]*$|(?:[ \t]+[^\n]*\n)*?[ \t]+enable[ \t]*\n(?:[ \t]+[^\n]*\n)*?[ \t]+minimum-length (?:[89]|[1-9]\d)[ \t]*$)

修正方法

修正方法: ガイダンスまたは IaC パッチ

password complexity minimum-length 8 lowercase-count 1 uppercase-count 1 special-char-count 1 numeric-count 1 history-count 1 enable # CIS guidance: Set a password complexity policy with a minimum of <X> characters long, includes at least <Y> lowercase/uppercase/special/numeric character, and doesn't allow users to reuse the past <Z> passwords: password complexity minimum-length <X> lowercase-count <Y> uppercase-count <Y> special-char-count <Y> numeric-count <Y> history-count <Z> enable Sample recommended password complexity configuration based on https://www.cisecurity.org/insights/white-papers/cis-password-policy-guide password complexity minimum-length 8 lowercase-count 1 uppercase-count 1 special-char-count 1 numeric-count 1 history-count 1 enable

プロパティ

オペレーティングシステム: すべて
タグ: aruba-cxauthentication
参照: CIS HPE Aruba Networking CX Switch Benchmark v1.0.1 - 1.1.3 Hardening Password Rules

このホストをチェック

監査が許可されているマシンで実行してください。スキャンは読み取り専用です。

shell

tmaegis scan --target aruba-cx