SSMC must enforce a delay of at least four seconds between logon prompts following a failed logon attempt.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-255240 | SSMC-OS-010060 | SV-255240r991588_rule | CCI-000366 | medium |
| Description | ||||
| Limiting the number of logon attempts over a certain time interval reduces the chances that an unauthorized user may gain access to an account. | ||||
| STIG | Date | |||
| HPE 3PAR SSMC Operating System Security Technical Implementation Guide | 2024-08-27 | |||
Related Frameworks
4 paths across 3 frameworks
Related Frameworks
NIST 800-531 mapping
CM-6
1.00
- DISA · V2R1 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
NIST 800-1712 mappings
3.4.1
1.00
- DISA · V2R1 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
3.4.2
1.00
- DISA · V2R1 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
CCI1 mapping
CCI-000366
1.00
- DISA · V2R1 · disa_xccdf · related
Details
Check Text (C-255240r991588_chk)
Verify that SSMC enforces a delay of at least four seconds between logon prompts following a failed logon attempt. To do so, perform the following steps.
1. Log on to SSMC appliance as ssmcadmin. Press "X" to escape to general bash shell.
2. Execute the following command:
$ sudo /ssmc/bin/config_security.sh -o config_failedlogin_delay -a status
Failed login delay is enabled
If the command output does not read "Failed login delay is enabled", this is a finding.
Fix Text (F-58797r869869_fix)
Configure SSMC to enforce a delay of at least four seconds between logon prompts following a failed logon attempt. To do so, perform the following steps.
1. Log on to SSMC appliance as ssmcadmin. Press "X" to escape to general bash shell.
2. Execute the following command:
$ sudo /ssmc/bin/config_security.sh -o config_failedlogin_delay -a enable -f