Detections
Analytics
ARBA-ND-000252 - AOS must enforce a minimum 15-character password length.
Information
Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. Password length is one factor of several that helps to determine strength and how long it takes to crack a password.The shorter the password, the lower the number of possible combinations that need to be tested before the password is compromised. Use of more characters in a password helps to exponentially increase the time and/or resources required to compromise the password.
Solution
Configure AOS with the following commands:configure terminal
aaa password-policy mgmt
password-min-length 15
exit
write memory
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_HPE_Aruba_Networking_AOS_Y26M04_STIG.zip
Item Details
Audit Name: DISA HPE Aruba Networking AOS NDM STIG v1r1
Category: IDENTIFICATION AND AUTHENTICATION
References: 800-53|IA-5(1)(a), CAT|II, CCI|CCI-000205, Rule-ID|SV-266931r1039814_rule, STIG-ID|ARBA-ND-000252, Vuln-ID|V-266931
Plugin: ArubaOS
Control ID: d0cb14b8a00e24c4a566d02e53c13245771bdeb7419285c1bcbd409b49b2ec7f