| 1.2.1 Ensure 'Account lockout duration' is set to '15 or more minute(s)' | CIS Windows 7 Workstation Level 1 v3.1.0 | Windows | ACCESS CONTROL |
| 1.2.2 Ensure 'Account lockout threshold' is set to '10 or fewer invalid logon attempt(s), but not 0' | CIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.1 L1 | Windows | |
| 1.2.2 Ensure 'Account lockout threshold' is set to '10 or fewer invalid logon attempt(s), but not 0' | CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L1 | Windows | |
| 1.2.2 Ensure 'Account lockout threshold' is set to '10 or fewer invalid logon attempt(s), but not 0' | CIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 L1 | Windows | |
| 1.2.2 Ensure 'Account lockout threshold' is set to '10 or fewer invalid logon attempt(s), but not 0' | CIS Microsoft Windows Server 2008 Domain Controller Level 1 v3.1.0 | Windows | ACCESS CONTROL |
| 1.4.1.1 Ensure 'aaa local authentication max failed attempts' is set to less than or equal to '3' | CIS Cisco ASA 9.x Firewall L1 v1.0.0 | Cisco | |
| 1.4.2 Ensure 'Failed Attempts' and 'Lockout Time' for Authentication Profile are properly configured - Lockout Time | CIS Palo Alto Firewall 9 Benchmark v1.0.0 L1 | Palo_Alto | |
| 1.6.10 Set retry limit for account lockout 'AUTH_MAXTRIES=10' (non-trusted) | CIS HP-UX 11i v1.5 | Unix | ACCESS CONTROL |
| 2.1.1.1.5 Set maximimum value for 'ip ssh authentication-retries' | CIS Cisco IOS 15 L1 v4.1.0 | Cisco | |
| 2.2.11 Ensure 'SEC_MAX_FAILED_LOGIN_ATTEMPTS' Is '3' or Less | CIS Oracle Server 18c DB Traditional Auditing v1.0.0 | OracleDB | |
| 3.1 Ensure 'FAILED_LOGIN_ATTEMPTS' Is Less than or Equal to '5' | CIS Oracle Server 18c DB Traditional Auditing v1.0.0 | OracleDB | |
| 3.1 Ensure 'FAILED_LOGIN_ATTEMPTS' Is Less than or Equal to '5' | CIS Oracle Server 18c DB Unified Auditing v1.0.0 | OracleDB | |
| 3.2 Ensure 'PASSWORD_LOCK_TIME' Is Greater than or Equal to '1' | CIS Oracle Server 18c DB Unified Auditing v1.0.0 | OracleDB | |
| 5.2.7 Ensure SSH MaxAuthTries is set to 4 or less - sshd output | CIS Oracle Linux 8 Workstation L1 v1.0.1 | Unix | |
| 5.2.7 Ensure SSH MaxAuthTries is set to 4 or less - sshd_config | CIS Oracle Linux 8 Workstation L1 v1.0.1 | Unix | |
| 5.2.7 Ensure SSH MaxAuthTries is set to 4 or less - sshd_config | CIS Oracle Linux 8 Server L1 v1.0.1 | Unix | |
| 5.2.7 Ensure SSH MaxAuthTries is set to 4 or less - sshd_config | CIS Red Hat EL8 Server L1 v1.0.1 | Unix | |
| 5.2.7 Ensure SSH MaxAuthTries is set to 4 or less - sshd_config | CIS Red Hat EL8 Workstation L1 v1.0.1 | Unix | |
| 5.3.1 Ensure password creation requirements are configured - retry=3 | CIS Debian 10 Server L1 v1.0.0 | Unix | |
| 5.3.2 Ensure lockout for failed password attempts is configured - pam_tally2.so | CIS Debian 10 Server L1 v1.0.0 | Unix | |
| 5.3.2 Ensure lockout for failed password attempts is configured - password-auth 'auth [default=die] pam_faillock.so authfail audit deny=5 unlock_time=900' | CIS Amazon Linux v2.1.0 L1 | Unix | ACCESS CONTROL |
| 5.3.2 Ensure lockout for failed password attempts is configured - password-auth 'auth sufficient pam_faillock.so authsucc audit deny=5 unlock_time=900' | CIS Amazon Linux v2.1.0 L1 | Unix | ACCESS CONTROL |
| 5.3.2 Lockout for failed password attempts - 'auth required pam_faillock.so preauth audit silent deny=5 unlock_time=900' | CIS Distribution Independent Linux Workstation L1 v1.1.0 | Unix | ACCESS CONTROL |
| 5.3.2 Lockout for failed password attempts - 'auth required pam_tally2.so onerr=fail audit silent deny=5 unlock_time=900' | CIS Distribution Independent Linux Workstation L1 v1.1.0 | Unix | ACCESS CONTROL |
| 5.4.1 Ensure password creation requirements are configured - system-auth retry=3 | CIS Oracle Linux 8 Server L1 v1.0.1 | Unix | |
| 5.4.1 Ensure password creation requirements are configured - system-auth retry=3 | CIS Oracle Linux 8 Workstation L1 v1.0.1 | Unix | |
| 5.4.2 Ensure lockout for failed password attempts is configured - account pam_deny.so | CIS Ubuntu Linux 20.04 LTS Workstation L1 v1.1.0 | Unix | |
| 5.4.2 Ensure lockout for failed password attempts is configured - account pam_tally2.so | CIS Ubuntu Linux 20.04 LTS Server L1 v1.1.0 | Unix | |
| 5.4.2 Ensure lockout for failed password attempts is configured - account pam_tally2.so | CIS Ubuntu Linux 20.04 LTS Workstation L1 v1.1.0 | Unix | |
| 5.4.2 Ensure lockout for failed password attempts is configured - password-auth 'auth required pam_faillock.so authfail | CIS Oracle Linux 8 Server L1 v1.0.1 | Unix | |
| 5.4.2 Ensure lockout for failed password attempts is configured - password-auth 'auth required pam_faillock.so authfail | CIS Oracle Linux 8 Workstation L1 v1.0.1 | Unix | |
| 5.4.2 Ensure lockout for failed password attempts is configured - password-auth 'auth required pam_faillock.so preauth | CIS Oracle Linux 8 Server L1 v1.0.1 | Unix | |
| 5.4.2 Ensure lockout for failed password attempts is configured - password-auth 'auth required pam_faillock.so preauth | CIS Oracle Linux 8 Workstation L1 v1.0.1 | Unix | |
| 5.4.2 Ensure lockout for failed password attempts is configured - system-auth auth required pam_faillock.so authfail | CIS Oracle Linux 8 Server L1 v1.0.1 | Unix | |
| 5.4.2 Ensure lockout for failed password attempts is configured - system-auth auth required pam_faillock.so authfail | CIS Oracle Linux 8 Workstation L1 v1.0.1 | Unix | |
| 5.4.2 Ensure lockout for failed password attempts is configured - system-auth auth required pam_faillock.so preauth | CIS Oracle Linux 8 Workstation L1 v1.0.1 | Unix | |
| 6.17 Set Retry Limit for Account Lockout - LOCK_AFTER_RETRIES | CIS Oracle Solaris 11.4 L1 v1.0.0 | Unix | |
| 6.17 Set Retry Limit for Account Lockout - RETRIES | CIS Oracle Solaris 11.4 L1 v1.0.0 | Unix | |
| 9.2.1 Set Password Creation Requirement Parameters Using pam_cracklib - retry | CIS Debian Linux 7 L1 v1.0.0 | Unix | ACCESS CONTROL |
| 9.2.2 Set Lockout for Failed Password Attempts | CIS Debian Linux 7 L1 v1.0.0 | Unix | ACCESS CONTROL |
| 17.5.1 Ensure 'Audit Account Lockout' is set to 'Success and Failure' | CIS Microsoft Windows Server 2008 Member Server Level 1 v3.1.0 | Windows | AUDIT AND ACCOUNTABILITY |
| 17.5.1 Ensure 'Audit Account Lockout' is set to include 'Failure' | CIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.1 L1 + BL | Windows | |
| 17.5.1 Ensure 'Audit Account Lockout' is set to include 'Failure' | CIS Microsoft Windows 10 Enterprise (Release 1909) v1.8.1 L1 + BL | Windows | |
| 17.5.1 Ensure 'Audit Account Lockout' is set to include 'Failure' | CIS Microsoft Windows 10 Enterprise (Release 1909) v1.8.1 L1 + BL + NG | Windows | |
| 17.5.1 Ensure 'Audit Account Lockout' is set to include 'Failure' | CIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 L1 + BL + NG | Windows | |
| 17.5.1 Ensure 'Audit Account Lockout' is set to include 'Failure' | CIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.1 L1 + BL + NG | Windows | |
| 17.5.1 Ensure 'Audit Account Lockout' is set to include 'Failure' | CIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.1 L1 | Windows | |
| 17.5.1 Ensure 'Audit Account Lockout' is set to include 'Failure' | CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L1 | Windows | |
| 17.5.1 Ensure 'Audit Account Lockout' is set to include 'Failure' | CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L1 + BL | Windows | |
| 17.5.1 Ensure 'Audit Account Lockout' is set to include 'Failure' | CIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 L1 + BL | Windows | |
