← Back to Omnissa Horizon Unified Access Gateway (UAG) Security Technical Implementation Guide

V-286596

CAT II (Medium)

The UAG local administrator account must be configured with a password maximum lifetime of 60 days or less.

Rule ID

SV-286596r1290951_rule

STIG

Omnissa Horizon Unified Access Gateway (UAG) Security Technical Implementation Guide

Version

V1R1

CCIs

CCI-000366

Discussion

If the application does not limit the lifetime of passwords and force users to change their passwords, there is the risk that the passwords and related accounts could be compromised. One method of minimizing this risk is to force users to use complex passwords and periodically change them.

Check Content

Log in to the UAG administrative interface as an administrator.

Select "Configure Manually".

Navigate to Advanced Settings >> System Configuration.

Click the gear icon to verify the settings.

If the "Password Age" is set to "0" or is set to a value greater than "60", this is a finding.

Fix Text

Log in to the UAG administrative interface as an administrator.

Select "Configure Manually".

Navigate to Advanced Settings >> System Configuration.

Click the gear icon to verify the settings.

Ensure the "Password Age" is set to "60".

Click "Save".