V-251779

Discussion

By limiting the number of failed login attempts, the risk of unauthorized system access via user password guessing, otherwise known as brute-forcing, is reduced.

Check Content

From an NSX-T Manager shell, run the following command(s):

>  get auth-policy api lockout-reset-period

Expected result:
900 seconds

If the output does not match the expected result, this is a finding.

>  get auth-policy api lockout-period

Expected result:
900 seconds

If the output does not match the expected result, this is a finding.

>  get auth-policy api max-auth-failures

Expected result:
3

If the output does not match the expected result, this is a finding.

>  get auth-policy cli lockout-period

Expected result:
900 seconds

If the output does not match the expected result, this is a finding.

>  get auth-policy cli max-auth-failures

Expected result:
3

If the output does not match the expected result, this is a finding.