← Back to Omnissa Horizon Unified Access Gateway (UAG) Security Technical Implementation Guide

V-286597

CAT II (Medium)

The UAG local monitoring accounts must be configured with a password maximum lifetime of 90 days or less.

Rule ID

SV-286597r1290954_rule

STIG

Omnissa Horizon Unified Access Gateway (UAG) Security Technical Implementation Guide

Version

V1R1

CCIs

CCI-000366

Discussion

If the application does not limit the lifetime of passwords and force users to change their passwords, there is the risk that the passwords and related accounts could be compromised. One method of minimizing this risk is to force users to use complex passwords and periodically change them.

Check Content

Log in to the UAG administrative interface as an administrator.

Select "Configure Manually".

Navigate to Advanced Settings >> System Configuration.

Click the gear icon to verify the settings.

If the "Monitoring User Password Age" is set to "0" or a value greater than "90", this is a finding.

Fix Text

Log in to the UAG administrative interface as an administrator.

Select "Configure Manually".

Navigate to Advanced Settings >> System Configuration.

Click the gear icon to verify the settings.

Ensure the "Monitoring User Password Age" is set to "90".

Click "Save".