Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
The ArcGIS Server must implement replay-resistant authentication mechanisms for network access to privileged accounts and non-privileged accounts.
Description
Discussion Text
A replay attack may enable an unauthorized user to gain access to the application. Authentication sessions between the authenticator and the application validating the user credentials must not be vulnerable to a replay attack.
An authentication process resists replay attacks if it is impractical to achieve a successful authentication by recording and replaying a previous authentication message.
A privileged account is any information system account with authorizations of a privileged user.
A non-privileged account is any operating system account with authorizations of a non-privileged user.
Satisfies: SRG-APP-000156, SRG-APP-000157, SRG-APP-000295
An authentication process resists replay attacks if it is impractical to achieve a successful authentication by recording and replaying a previous authentication message.
A privileged account is any information system account with authorizations of a privileged user.
A non-privileged account is any operating system account with authorizations of a non-privileged user.
Satisfies: SRG-APP-000156, SRG-APP-000157, SRG-APP-000295
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.