STIGQter: STIG Summary: Riverbed SteelHead CX v8 NDM Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 25 Oct 2019:

Riverbed Optimization System (RiOS) must enable the password authentication control policy to ensure password complexity controls and other password policy requirements are enforced.

DISA Rule

SV-77431r1_rule

Vulnerability Number

V-62941

Group Title

SRG-APP-000516-NDM-000317

Rule Version

RICX-DM-000091

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Enable RiOS authentication policy.

Navigate to the device Management Console, then
Navigate to:
Configure >> Security >> Password Policy
Select "Enable Account Control"

Set values for the user account

Click "Save" to save these settings permanently

Check Contents

Verify authentication policy is enabled.

Navigate to the device Management Console
Navigate to:
Configure >> Security >> Password Policy

Verify the "Enable Account Control" is selected

If "Enable Account Control" is not set, this is a finding.

Vulnerability Number

V-62941

Documentable

False

Rule Version

RICX-DM-000091

Severity Override Guidance

Verify authentication policy is enabled.

Navigate to the device Management Console
Navigate to:
Configure >> Security >> Password Policy

Verify the "Enable Account Control" is selected

If "Enable Account Control" is not set, this is a finding.

Check Content Reference

M

Target Key

2931

Comments