Ensure Force users to change password at first login after password was changed from Users page is selected

高级别 1自动化checkpoint

说明

Force users to change password at first login after their password was changed using the command set user password or from the WebUI User Management > Users page. PASS requires force-change-when password. Audited against the Gaia clish 'show configuration' output (run 'show configuration' in clish on each gateway and management server and save the full output).

检查方式

审计方法: 配置正则匹配

匹配模式: (?m)^set password-controls force-change-when password[ \t]*$

修复方式

修复方法: 操作指南或基础设施补丁

set password-controls force-change-when password save config # CIS guidance: Run the following command to set force-change-when setting. CLI: set password-controls force-change-when password GUI: Navigate to User Management > Password Policy > Mandatory Password Change: Checked the 'Force users to change password at first login after password was changed from Users page' setting.

属性

操作系统: 任意
标签: checkpointauthentication
参考: CIS Check Point Firewall Benchmark v1.1.0 - 1.10 Ensure Force users to change password at first login after password was changed from Users page is selected

检查本机

请在您有权审计的机器上运行此命令。扫描为只读操作。

shell

tmaegis scan --target checkpoint