The network device must be configured to enforce the limit of three consecutive invalid logon attempts, after which time it must lock out the user account from accessing the device for 15 minutes.

Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The network device must be configured to enforce the limit of three consecutive invalid logon attempts, after which time it must lock out the user account from accessing the device for 15 minutes.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-55055	SRG-APP-000065-NDM-000214	SV-69301r2_rule		Medium

Description
By limiting the number of failed login attempts, the risk of unauthorized system access via user password guessing, otherwise known as brute-forcing, is reduced.

STIG	Date
Network Device Management Security Requirements Guide	2019-12-19

Details

Check Text ( C-55677r2_chk )
Review the device configuration to verify that it enforces the limit of three consecutive invalid logon attempts. If the device is not configured to enforce the limit of three consecutive invalid logon attempts, this is a finding.

Fix Text (F-59921r2_fix)
Configure the network device to enforce the limit of three consecutive invalid logon attempts during a 15-minute time period.