Details

Minimum length of system user password. When strong password is enabled default minimum length is 4. User entered value can be greater than or equal to 4. Default mininum value is 1 when strong password is disabled. Maximum value is 127 in both cases.

Solution

Configuration > System > Settings > Change Global System Settings > Password

Update the value to a minimum of 12 characters.

Minimum value = 1

Maximum value = 127

Supportive Information

The following resource is also helpful.

• https://developer-docs.citrix.com/projects/citrix-adc-nitro-api-reference/en/latest/api-reference/

This security hardening control applies to the following category of controls within NIST 800-53: Identification and Authentication.This control applies to the following type of system Citrix_Application_Delivery.

References

• 800-53|IA-5(1)(a)

Source

• Tenable.com/audits