I - Mission Critical Sensitive
Rules and Groups employed by this XCCDF Profile
-
SRG-APP-000395-NDM-000347
<GroupDescription></GroupDescription>Group -
The HYCU server must authenticate Network Time Protocol sources using authentication that is cryptographically based.
<VulnDiscussion>If Network Time Protocol is not authenticated, an attacker can introduce a rogue NTP server. This rogue server can then be us...Rule Medium Severity -
SRG-APP-000166-NDM-000254
<GroupDescription></GroupDescription>Group -
The HYCU server must enforce password complexity by requiring that at least one uppercase character be used.
<VulnDiscussion>Use of a complex passwords helps to increase the time and resources required to compromise the password. Password complexity,...Rule Medium Severity -
SRG-APP-000164-NDM-000252
<GroupDescription></GroupDescription>Group -
The network device must enforce a minimum 15-character password length.
<VulnDiscussion>Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute...Rule Medium Severity -
SRG-APP-000170-NDM-000329
<GroupDescription></GroupDescription>Group -
The HYCU server must require that when a password is changed, the characters are changed in at least eight of the positions within the password.
<VulnDiscussion>If the application allows the user to consecutively reuse extensive portions of passwords, this increases the chances of pass...Rule Medium Severity -
SRG-APP-000080-NDM-000345
<GroupDescription></GroupDescription>Group -
The HYCU VM console must not have any default manufacturer passwords when deployed.
<VulnDiscussion>Virtual Machines not protected with strong password schemes provide the opportunity for anyone to crack the password and gain...Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.