SSMC must enforce a delay of at least four seconds between logon prompts following a failed logon attempt.

Severity	Group ID	Group Title	Version	Rule ID	Date	STIG Version
medium	V-255240	SRG-OS-000480-GPOS-00226	SSMC-OS-010060	SV-255240r991588_rule	2024-08-27	2

Description
Limiting the number of logon attempts over a certain time interval reduces the chances that an unauthorized user may gain access to an account.

ℹ️ Check
Verify that SSMC enforces a delay of at least four seconds between logon prompts following a failed logon attempt. To do so, perform the following steps. 1. Log on to SSMC appliance as ssmcadmin. Press "X" to escape to general bash shell. 2. Execute the following command: $ sudo /ssmc/bin/config_security.sh -o config_failedlogin_delay -a status Failed login delay is enabled If the command output does not read "Failed login delay is enabled", this is a finding.

ℹ️ Check

Verify that SSMC enforces a delay of at least four seconds between logon prompts following a failed logon attempt. To do so, perform the following steps. 1. Log on to SSMC appliance as ssmcadmin. Press "X" to escape to general bash shell. 2. Execute the following command: $ sudo /ssmc/bin/config_security.sh -o config_failedlogin_delay -a status Failed login delay is enabled If the command output does not read "Failed login delay is enabled", this is a finding.

✔️ Fix
Configure SSMC to enforce a delay of at least four seconds between logon prompts following a failed logon attempt. To do so, perform the following steps. 1. Log on to SSMC appliance as ssmcadmin. Press "X" to escape to general bash shell. 2. Execute the following command: $ sudo /ssmc/bin/config_security.sh -o config_failedlogin_delay -a enable -f