The HP FlexFabric Switch must notify the administrator of the number of successful logon attempts occurring during an organization-defined time period.
An XCCDF Rule
Description
<VulnDiscussion>Administrators need to be aware of activity that occurs regarding their network device management account. Providing administrators with information regarding the date and time of their last successful logon allows the administrator to determine if any unauthorized activity has occurred. This incorporates all methods of logon including, but not limited to, SSH, HTTP, HTTPS, and physical connectivity. The organization-defined time period is dependent on the frequency with which administrators typically log on to the HP FlexFabric Switch.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-80773r1_rule
- Severity
- Medium
- References
- Updated
Remediation - Manual Procedure
Configure the HP FlexFabric Switch to notify the administrator of the date and time of the last unsuccessful logon:
[HP] password-control enable