IBM Aspera Faspex must lock accounts after three unsuccessful login attempts within a 15-minute timeframe.

An XCCDF Rule

Description

By limiting the number of failed login attempts, the risk of unauthorized system access via user password guessing, otherwise known as brute-forcing, is reduced. Limits are imposed by locking the account.

ID: SV-252581r831503_rule
Version: ASP4-FA-050170
Severity: Medium
References: CCI-000044 CCI-002236 CCI-002238
Updated: 3 days ago

Remediation Templates

Configure IBM Aspera Faspex to lock accounts after three unsuccessful login attempts within a 15-minute timeframe: 

- Log in to the IBM Aspera Faspex web page as a user with administrative privilege. 
- Select the "Server" tab.
- Select the "Configuration" tab.
- Select the "Security" section.- Edit the "Faspex accounts" "Lock users" section failed login attempts option to "3" or less.
- Edit the "Lock users" section attempts within minutes to "15" or less.
- Select "Update" at the bottom of the page.

IBM Aspera Faspex must lock accounts after three unsuccessful login attempts within a 15-minute timeframe.

Description

Remediation Templates

A Manual Procedure