Details

Password-guessing attacks against the ‘admin’ account may succeed quickly if account lockouts are not enabled.

Solution

Edit the configuration and add this line:n

no aaa authentication attempts class-override admin no-lockout

This security hardening control applies to the following category of controls within NIST 800-53: Access Control.This control applies to the following type of system FireEye.

References

• 800-53|AC-7a.
• CSCv6|16.7

Source

• Tenable.com/audits