V-286580

Discussion

The UAG administrative interface provides two roles, a full administrative role, and a low-privilege administrator role that can perform a limited number of tasks such as read-only operations, system monitoring, downloading logs, and exporting configurations. Care must be taken to ensure only authorized users are provided access to the UAG administrative interface, and the list of low-privilege administrator accounts is periodically reviewed for accuracy.

Check Content

Log in to the UAG administrative interface as an administrator.

Select "Configure Manually".

Navigate to Advanced Settings >> Account Settings. 

Click the gear icon to edit.

Verify the privileged accounts are configured and enabled based on organizational roles.

If the UAG contains any enabled privileged accounts and do not conform to organizational roles, this is a finding.