Title

AAA Services must be configured to require users to be individually authenticated before granting access to the shared accounts or resources. (Cat II impact)

Discussion

Individual authentication prior to shared group authentication mitigates the risk of using group accounts or authenticators.

Check Content

Verify AAA Services is configured to require users to be individually authenticated before granting access to the shared accounts or resources. If AAA Services is not configured to require users to be individually authenticated before granting access to the shared accounts or resources, this is a finding.

Fix Text

Configure AAA Services to require users to be individually authenticated before granting access to the shared accounts or resources.

Additional Identifiers

Rule ID: SV-263531r982389_rule

Vulnerability ID: V-263531

Group Title: SRG-APP-000815

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.