IA-02(09) Network Access to Non-privileged Accounts — Replay Resistant
NIST SP 800-53 (controls) 5.2.0 against 5.2.0
All changes in this version
All changes in this version
Title
Network Access to Non-privileged Accounts — Replay Resistant
STIG rules that implement this control 8
Application Security and Development V6R5
- APSC-DV-001630 CAT II The application must implement replay-resistant authentication mechanisms for network access to nonprivileged accounts.
Microsoft Edge V2R5
- EDGE-00-000062 CAT II The built-in DNS client must be disabled.
Microsoft Windows Server 2022 V2R11
- WN22-DC-000020 CAT II Windows Server 2022 Kerberos user logon restrictions must be enforced.
- WN22-DC-000030 CAT II Windows Server 2022 Kerberos service ticket maximum lifetime must be limited to 600 minutes or less.
- WN22-DC-000040 CAT II Windows Server 2022 Kerberos user ticket lifetime must be limited to 10 hours or less.
- WN22-DC-000050 CAT II Windows Server 2022 Kerberos policy user ticket renewal maximum lifetime must be limited to seven days or less.
- WN22-DC-000060 CAT II Windows Server 2022 computer clock synchronization tolerance must be limited to five minutes or less.
Red Hat Enterprise Linux 9 V2R10
- RHEL-09-611160 CAT II RHEL 9 must use the common access card (CAC) smart card driver.