Skip to content

Authentication, Authorization, and Accounting Services (AAA) Security Requirements Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • AAA Services must be configured to use Role-Based Access Control (RBAC) policy for levels of access authorization.

    <VulnDiscussion>RBAC is an access control policy that restricts information system access to authorized users. Without these security policie...
    Rule Low Severity
  • SRG-APP-000065-AAA-000200

    <GroupDescription></GroupDescription>
    Group
  • AAA Services must be configured to automatically lock user accounts after three consecutive invalid logon attempts within a 15-minute time period.

    &lt;VulnDiscussion&gt;By limiting the number of failed logon attempts, the risk of unauthorized system access via user password guessing, otherwise...
    Rule Medium Severity
  • SRG-APP-000345-AAA-000210

    <GroupDescription></GroupDescription>
    Group
  • AAA Services must be configured to maintain locks on user accounts until released by an administrator.

    &lt;VulnDiscussion&gt;By limiting the number of failed logon attempts, the risk of unauthorized system access via user password guessing, otherwise...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules