The MQ Appliance network device must enforce the limit of three consecutive invalid logon attempts by a user during a 15-minute time period.
An XCCDF Rule
Description
By limiting the number of failed logon attempts, the risk of unauthorized system access via user password guessing, otherwise known as brute forcing, is reduced.
- ID
- SV-89603r1_rule
- Version
- MQMH-ND-000150
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Log on to the MQ Appliance WebGUI as a privileged user. Go to Administration (gear icon) >> Access >> RBM Settings.
Set Authentication Method to LDAP.
Configure LDAP connection as required.
Note: Enforcing the limit of three consecutive invalid logon attempts during a 15-minute time period is the responsibility of the LDAP server.