Detections
Analytics

1.7 CISC-ND-000150

Information

The Cisco switch must be configured to enforce the limit of three consecutive invalid logon attempts, after which time it must disconnect the session.

GROUP ID: V-220480
RULE ID: SV-220480r960840

By limiting the number of failed logon attempts, the risk of unauthorized system access via user password guessing, otherwise known as brute-forcing, is reduced.

Solution

Configure the Cisco switch to enforce the limit of three consecutive invalid logon attempts as shown in the example below:

SW2(config)# ssh login-attempts 3

See Also

https://workbench.cisecurity.org/benchmarks/26427

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-7a., CCI|CCI-000044, Rule-ID|SV-220480r960840_rule, STIG-ID|CISC-ND-000150, Vuln-ID|V-220480

Plugin: Cisco

Control ID: f8a33a540939cdb87da6cf30cdf495809fcdc162dfdbdab140eded88b4268098