STIGQter: STIG Summary: HP FlexFabric Switch NDM Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 24 Jul 2020:

The HP FlexFabric Switch must automatically disable accounts after a 35-day period of account inactivity.

DISA Rule

SV-80631r1_rule

Vulnerability Number

V-66141

Group Title

SRG-APP-000025-NDM-000207

Rule Version

HFFS-ND-000008

Severity

CAT III

CCI(s)

• CCI-000017 - The information system automatically disables inactive accounts after an organization-defined time period.

Weight

10

Fix Recommendation

Configure the HP FlexFabric Switch to automatically disable accounts after 35 days of inactivity:

[HP]password-control login idle-time 35

Check Contents

Review the HP FlexFabric Switch configuration to determine if it automatically disables accounts after 35 days.

[HP] display password-control

Global password control configurations:

User account idle time: 35 days

If accounts are not automatically disabled after 35 days of inactivity, this is a finding.

Vulnerability Number

V-66141

Documentable

False

Rule Version

HFFS-ND-000008

Severity Override Guidance

Review the HP FlexFabric Switch configuration to determine if it automatically disables accounts after 35 days.

[HP] display password-control

Global password control configurations:

User account idle time: 35 days

If accounts are not automatically disabled after 35 days of inactivity, this is a finding.

Check Content Reference

M

Target Key

2971

Comments