Unified Access Gateway supports configuration settings to allow to comply with Security Technical Implementation Guide (STIG) based on the CloudLinux AlmaLinux OS 9 STIG - Ver 1, Rel 6 guidelines.
To achieve compliance, deploy the FIPS-compliant version of Unified Access Gateway appliance by configuring the following parameters during the deployment process.
| Parameter | Description |
|---|---|
| dsComplianceOS | Set to true to enable DISA STIG OS compliance settings. |
| rootPasswordExpirationDays | Password expiration in days for the OS user. Default is 365 days. Set the value to 60. |
| passwordPolicyMinLen | Minimum length of the root password. The accepted range is 6–64 characters. Set the value to 15. |
| passwordPolicyMinClass | Minimum complexity of the root password. The accepted range is 1–4. Set the value to 4. |
| passwordPolicyUnlockTime | Time in seconds before login is re-enabled after reaching the maximum number of failed login attempts. The default is 900. Accepted values are 0 or between 1 and 3600. Setting the value to 0 permanently locks the account until manually unlocked by an admin. For STIG compliance, set the value to 0. |
| sshEnabled | Set to true to automatically enable SSH access on the deployed appliance. |
| sshKeyAccessEnabled | Allows SSH login using a key pair. Set this to true. |
| rootSessionIdleTimeoutSeconds | Idle timeout in seconds for an OS user's session. If set to 0, the session never expires. Allowed range: 30–3600. Set the value to 600. |
| DNS | Ensure the configuration includes at least two DNS servers, one as the primary (active) and the other as the secondary (backup). |
Post deployment, configure the following parameter using the Admin UI.
| Parameter | Description |
|---|---|
| syslogUrl | Set the syslog server URL to use TLS as the communication protocol. |
Was this page helpful?