STIGQter: STIG Summary: Cisco ISE NDM Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 13 Apr 2021:

For accounts using password authentication, the Cisco ISE must enforce password complexity by requiring that at least one upper-case character be used.

DISA Rule

SV-242646r714248_rule

Vulnerability Number

V-242646

Group Title

SRG-APP-000166-NDM-000254

Rule Version

CSCO-NM-000410

Severity

CAT II

CCI(s)

• CCI-000192 - The information system enforces password complexity by the minimum number of upper case characters used.

Weight

10

Fix Recommendation

Configure the password policy.

password-policy upper-case required 1

Check Contents

Verify that at least one upper-case letter is required.

Show password policy

If the Cisco ISE password policy is not configured to require at least one upper-case character, this is a finding.

Vulnerability Number

V-242646

Documentable

False

Rule Version

CSCO-NM-000410

Severity Override Guidance

Verify that at least one upper-case letter is required.

Show password policy

If the Cisco ISE password policy is not configured to require at least one upper-case character, this is a finding.

Check Content Reference

M

Target Key

5384

Comments