The network element must enforce the organizationally defined maximum number of consecutive invalid login attempts.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
SRG-NET-000038-RTR-NA	SRG-NET-000038-RTR-NA	SRG-NET-000038-RTR-NA_rule		Medium

Description
A malicious or unauthorized user could gain access to a network element by guessing or using methods such as dictionary attack, word list substitution, or brute force attack; --all of which require multiple attempts. By limiting the number of failed login attempts permitted within a defined period of time, the risk of unauthorized system access via user password guessing can be mitigated. This requirement is applicable to network device management and is not applicable to the routing function.

Description

A malicious or unauthorized user could gain access to a network element by guessing or using methods such as dictionary attack, word list substitution, or brute force attack; --all of which require multiple attempts. By limiting the number of failed login attempts permitted within a defined period of time, the risk of unauthorized system access via user password guessing can be mitigated. This requirement is applicable to network device management and is not applicable to the routing function.

STIG	Date
Router Security Requirements Guide	2013-07-30

Details

Check Text ( C-SRG-NET-000038-RTR-NA_chk )
This requirement is NA for router.

Fix Text (F-SRG-NET-000038-RTR-NA_fix)
This requirement is NA for router.