The network element must automatically lock an account after the maximum number of unsuccessful login attempts is exceeded and remain locked for an organizationally defined time period or until released by an administrator.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
SRG-NET-000040-RTR-NA	SRG-NET-000040-RTR-NA	SRG-NET-000040-RTR-NA_rule		Medium

Description
A malicious or unauthorized user could gain access to a network element by guessing or using methods such as dictionary attack, word list substitution, or brute force attack; --all of which require multiple attempts. Locking an account after a maximum number of unsuccessful attempts is exceeded will reduce the risk of unauthorized system access via password guessing. This requirement is applicable to network device management and is not applicable to the routing function.

Description

A malicious or unauthorized user could gain access to a network element by guessing or using methods such as dictionary attack, word list substitution, or brute force attack; --all of which require multiple attempts. Locking an account after a maximum number of unsuccessful attempts is exceeded will reduce the risk of unauthorized system access via password guessing. This requirement is applicable to network device management and is not applicable to the routing function.

STIG	Date
Router Security Requirements Guide	2013-07-30

Details

Check Text ( C-SRG-NET-000040-RTR-NA_chk )
This requirement is NA for router.

Fix Text (F-SRG-NET-000040-RTR-NA_fix)
This requirement is NA for router.