Details

Allow no more than 3 incorrect password attempts. The default value of attempts is 3. Check for commands that would increase the number of attempts

Solution

To configure max retries, run the following command in system view:nn ssh server authentication-retries 3

This security hardening control applies to the following category of controls within NIST 800-53: Access Control.This control applies to the following type of system Huawei.

References

• 800-53|AC-7a.
• CSCv6|16.7

Source

• Tenable.com/audits