PANW-NM-000054 - If multifactor authentication is not available and passwords must be used, the Palo Alto Networks security platform must prohibit password reuse for a minimum of five generations.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

Information

Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. To meet password policy requirements, passwords need to be changed at specific policy-based intervals.

If the network device allows the user to consecutively reuse their password when that password has exceeded its defined lifetime, the end result is a password that is not changed as per policy requirements.

Solution

Go to Device >> Setup >> Management
In the 'Minimum Password Complexity' window, select the 'Edit' icon (the gear symbol in the upper-right corner of the pane).
In the 'Prevent Password Reuse Limit' field, enter '5'.
Check the 'Enabled' box, then select 'OK'.
Commit changes by selecting 'Commit' in the upper-right corner of the screen.
Select 'OK' when the confirmation dialog appears.

Item Details

Audit Name: DISA STIG Palo Alto NDM v1r4

Category: IDENTIFICATION AND AUTHENTICATION

Plugin: Palo_Alto

Control ID: dddf1ba11b7f2c4b420f11fd9cee685d4250280047b91e293949649a34770707

Detections

Analytics

PANW-NM-000054 - If multifactor authentication is not available and passwords must be used, the Palo Alto Networks security platform must prohibit password reuse for a minimum of five generations.

Warning! Audit Deprecated

Information

Solution

See Also

Item Details