Skip to content
ATO Pathways
  Log In

I - Mission Critical Public

Rules and Groups employed by this XCCDF Profile

  • SRG-NET-000138-ALG-000063

    <GroupDescription></GroupDescription>
    Group
    Show

  • IBM Aspera Console must be configured with a preestablished trust relationship and mechanisms with appropriate authorities (e.g., Active Directory or AAA server) which validate user account access authorizations and privileges.

    &lt;VulnDiscussion&gt;User account and privilege validation must be centralized in order to prevent unauthorized access using changed or revoked pr...
    Rule Medium Severity
    Show

  • SRG-NET-000062-ALG-000011

    <GroupDescription></GroupDescription>
    Group
    Show

  • The IBM Aspera Console feature must be configured to use encryption services that implement NIST FIPS-validated cryptography to protect the confidentiality of remote access sessions.

    &lt;VulnDiscussion&gt;Without confidentiality protection mechanisms, unauthorized individuals may gain access to sensitive information via a remote...
    Rule High Severity
    Show

  • SRG-NET-000213-ALG-000107

    <GroupDescription></GroupDescription>
    Group
    Show

  • IBM Aspera Console interactive session must be terminated after 10 minutes of inactivity for non-privileged and privileged sessions.

    &lt;VulnDiscussion&gt;Terminating an idle session within a short time period reduces the window of opportunity for unauthorized personnel to take c...
    Rule Medium Severity
    Show

  • SRG-NET-000512-ALG-000062

    <GroupDescription></GroupDescription>
    Group
    Show

  • IBM Aspera Console must enforce password complexity by requiring at least fifteen characters, with at least one upper case letter, one lower case letter, one number, and one symbol.

    &lt;VulnDiscussion&gt;Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, ...
    Rule Medium Severity
    Show

  • SRG-NET-000512-ALG-000062

    <GroupDescription></GroupDescription>
    Group
    Show

  • IBM Aspera Console must lock accounts after three unsuccessful login attempts within a 15-minute timeframe.

    &lt;VulnDiscussion&gt;By limiting the number of failed login attempts, the risk of unauthorized system access via user password guessing, otherwise...
    Rule Medium Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules