← Back to IBM Aspera Platform 4.2 Security Technical Implementation Guide

V-252585

CAT II (Medium)

IBM Aspera Faspex passwords must be prohibited from reuse for a minimum of five generations.

Rule ID

SV-252585r817925_rule

STIG

IBM Aspera Platform 4.2 Security Technical Implementation Guide

Version

V1R3

CCIs

CCI-000200

Discussion

Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. If the information system or application allows the user to reuse their password consecutively when that password has exceeded its defined lifetime, the end result is a password that is not changed per policy requirements.

Check Content

If the IBM Aspera Faspex feature of the Aspera Platform is not installed, this is Not Applicable.

Verify IBM Aspera Faspex passwords are prohibited from reuse for a minimum of five generations: 

- Log in to the IBM Aspera Faspex web page as a user with administrative privilege. 
- Select the "Server" tab.
- Select the "Configuration" tab.
- Select the "Security" section.
- Verify the "Faspex accounts" "Prevent passwords reuse" option is checked.
- Verify the "Faspex accounts" "Prevent passwords reuse" options is set to "5" or more.

If the "Prevent passwords reuse" options is less than "5" or the option is not checked, this is a finding.

Fix Text

Configure IBM Aspera Faspex passwords to be prohibited from reuse for a minimum of five generations: 

- Log in to the IBM Aspera Faspex web page as a user with administrative privilege. 
- Select the "Server" tab.
- Select the "Configuration" tab.
- Select the "Security" section.
- Put a check the "Faspex accounts" "Prevent passwords reuse" check box.
- Edit the "Faspex accounts" "Prevent passwords reuse" option to "5" or more.
- Select "Update" at the bottom of the page.