Security Configuration: STIG Compliance

Tags: Version 11.4

Overview

Note: Security Technical Implementation Guide (STIG) Compliance is available in NetWitness Platform.

This topic provides information on Security Technical Implementation Guide (STIG) Compliance.

STIG Limits Account Access

NetWitness Platform 11.3.1, is STIG compliant which helps to lock down information, systems, and software, which might otherwise be vulnerable to a malicious computer attack by limiting account access to a system.

For example, STIG:

• Ensures that the account password has a length, complexity, expiration period, and lockout period that are in accordance with DISA’s best practices.
• Applies auditing and logging of user actions on the appliance.

To be STIG compliant, your organization must implement policies that ensure strong passwords. For more information, see the NetWitness Platform 11.4 Introduction on STIG help topic in the System Maintenance Guide. For information on the STIG exceptions, see the DISA STIG topic in the System Maintenance Guide.