Skip to content

III - Administrative Sensitive

Rules and Groups employed by this XCCDF Profile

  • For password-based authentication, AAA Services must be configured to verify when users create or update passwords, and that the passwords are not on the list of commonly-used, expected, or compromised passwords in IA-5 (1) (a).

    <VulnDiscussion>Password-based authentication applies to passwords regardless of whether they are used in single-factor or multi-factor authe...
    Rule Medium Severity
  • SRG-APP-000855

    <GroupDescription></GroupDescription>
    Group
  • For password-based authentication, AAA Services must be configured to require immediate selection of a new password upon account recovery.

    &lt;VulnDiscussion&gt;Password-based authentication applies to passwords regardless of whether they are used in single-factor or multi-factor authe...
    Rule Medium Severity
  • SRG-APP-000860

    <GroupDescription></GroupDescription>
    Group
  • For password-based authentication, AAA Services must be configured to allow user selection of long passwords and passphrases, including spaces and all printable characters.

    &lt;VulnDiscussion&gt;Password-based authentication applies to passwords regardless of whether they are used in single-factor or multi-factor authe...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules