Ensure Allow access again after time is set to 300 or more second

보통레벨 2자동pfsense

설명

Account password lockout >= 300 seconds. Allow access again after a user has been locked out (due to failed login attempts). The user is allowed access after the configured time if there have been no login attempts during that time). PASS requires the Login Protection blocktime (<sshguard_blocktime>) of 300 seconds or more. Audited against the pfSense config.xml (Diagnostics > Backup & Restore > Download configuration, or /cf/conf/config.xml).

점검 방법

감사 방식: 구성 패턴

패턴: <sshguard_blocktime>(?:[3-9]\d\d|\d{4,})</sshguard_blocktime>

조치 방법

조치 방식: 가이드 또는 인프라 패치

GUI: System > Advanced > Admin Access > Login Protection > Blocktime = 300, Save. # CIS guidance: In GUI: - Navigate to System > Advanced > Admin Access - set the 'Login Protection' options. - set 'Blocktime' value to 300. - CLIck Save

속성

운영 체제: 모두
태그: pfsensetime
참고 자료: CIS pfSense Firewall Benchmark v1.1.0 - 3.3 Ensure Allow access again after time is set to 300 or more second

이 호스트 점검하기

감사 권한이 있는 시스템에서 실행하세요. 스캔은 읽기 전용입니다.

shell

tmaegis scan --target pfsense --level 2