← Back to HPE 3PAR SSMC Operating System Security Technical Implementation Guide

V-255240

CAT II (Medium)

SSMC must enforce a delay of at least four seconds between logon prompts following a failed logon attempt.

Rule ID

SV-255240r991588_rule

STIG

HPE 3PAR SSMC Operating System Security Technical Implementation Guide

Version

V2R1

CCIs

CCI-000366

Discussion

Limiting the number of logon attempts over a certain time interval reduces the chances that an unauthorized user may gain access to an account.

Check Content

Verify that SSMC enforces a delay of at least four seconds between logon prompts following a failed logon attempt. To do so, perform the following steps.

1. Log on to SSMC appliance as ssmcadmin. Press "X" to escape to general bash shell.

2. Execute the following command:

$ sudo /ssmc/bin/config_security.sh -o config_failedlogin_delay -a status

Failed login delay is enabled

If the command output does not read "Failed login delay is enabled", this is a finding.

Fix Text

Configure SSMC to enforce a delay of at least four seconds between logon prompts following a failed logon attempt. To do so, perform the following steps.

1. Log on to SSMC appliance as ssmcadmin. Press "X" to escape to general bash shell.

2. Execute the following command:

$ sudo /ssmc/bin/config_security.sh -o config_failedlogin_delay -a enable -f