The Palo Alto Networks security platform must not use Password Profiles.
An XCCDF Rule
Description
<VulnDiscussion>Password profiles override settings made in the Minimum Password Complexity window. If Password Profiles are used they can bypass password complexity requirements.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-228675r961863_rule
- Severity
- Medium
- References
- Updated
Remediation - Manual Procedure
Go to Device >> Password Profiles
If the screen is blank (no configured Password Profiles), do nothing.
If there are configured Password Profiles, identify which accounts are using them and bring this to the attention of the ISSO immediately.
Delete the Password Profiles when authorized to make changes to the device in accordance with local change management policies.