Ensure Allow access again after time is set to 300 or more second

SrednjaNivo 2Automatskapfsense

Opis

Account password lockout >= 300 seconds. Allow access again after a user has been locked out (due to failed login attempts). The user is allowed access after the configured time if there have been no login attempts during that time). PASS requires the Login Protection blocktime (<sshguard_blocktime>) of 300 seconds or more. Audited against the pfSense config.xml (Diagnostics > Backup & Restore > Download configuration, or /cf/conf/config.xml).

Kako se proverava

Metod provere: Obrazac konfiguracije

Obrazac: <sshguard_blocktime>(?:[3-9]\d\d|\d{4,})</sshguard_blocktime>

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

GUI: System > Advanced > Admin Access > Login Protection > Blocktime = 300, Save. # CIS guidance: In GUI: - Navigate to System > Advanced > Admin Access - set the 'Login Protection' options. - set 'Blocktime' value to 300. - CLIck Save

Svojstva

Operativni sistemi: Bilo koji
Oznake: pfsensetime
Referenca: CIS pfSense Firewall Benchmark v1.1.0 - 3.3 Ensure Allow access again after time is set to 300 or more second

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target pfsense --level 2