Draft CIS Benchmark 1.1.9
Description
Login pages should be rate limited to increase resiliency against brute force attempts. This is configured via the following parameters: limit_req limit_req_zone Can further be combined with either the default 'limit_req' and 'limit_req_zone' configurations, or have additional (further limited) values for these login portals
Rationale
Limits the rate of attack on forms that provide system logon capabilities
Remediation
None provided
Audit
None provided
Description
Login pages should be rate limited to increase resiliency against brute force attempts. This is configured via the following parameters: limit_req limit_req_zone Can further be combined with either the default 'limit_req' and 'limit_req_zone' configurations, or have additional (further limited) values for these login portals
Rationale
Limits the rate of attack on forms that provide system logon capabilities
Remediation
None provided
Audit
None provided