Nutanix AOS 5.20.x OS Security Technical Implementation Guide

The Nutanix AOS 5.20.x OS Security Technical Implementation Guide (V1 R2) has 119 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

119STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R2

CurrentPublished Wed Jul 24 2024

Nutanix AOS must enforce a delay of at least four seconds between logon prompts following a failed logon attempt.

Nutanix AOS 5.20.x OS Security Technical Implementation Guide

Assessment Title

Rule Text

Nutanix AOS must enforce a delay of at least four seconds between logon prompts following a failed logon attempt.

Description

Discussion Text

Limiting the number of logon attempts over a certain time interval reduces the chances that an unauthorized user may gain access to an account.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-254193

Rule

SV-254193r991588_rule

Severity

medium

Rule Version

NUTX-OS-001060

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Confirm Nutanix AOS enforces a delay of at least four seconds between console logon prompts following a failed logon attempt.

$ sudo grep -i fail_delay /etc/login.defs
FAIL_DELAY 4

If the value of "FAIL_DELAY" is not set to "4" or greater, or the line is commented out, this is a finding.

Implementation Procedure

Fix Text

Configure Nutanix AOS to enforce a delay between logon prompts following a failed logon attempt by running the following command:

$ sudo salt-call state.sls security/CVM/pamCVM

STIG check 74 of 119 in the Nutanix AOS 5.20.x OS STIG checklist

← Previous · V-254192Nutanix AOS must prevent the use of dictionary words for passwords.Next · V-254194 →Nutanix AOS must be configured to run SCMA daily.