Need details on SPANVA password policy & web expiration

Products

• CASB Audit
• CASB Security Advanced IAAS
• CASB Security Premium
• CASB Security Standard
• CASB Security Advanced
• CASB Securlet SAAS

Issue/Introduction

Kindly provide us with the following details:

1. Does SPAN VA appliance have password policy management configuration. If no, what are the default configuration?

2. What is the Password Expiration period on SPAN VA?

3. What is the session timeout period in case the system is left idle.

Resolution

1. Does SPAN VA appliance have password policy management configuration. If no, what are the default configuration?

Passwords must be at least 12 characters and contain at least one lowercase letter, one uppercase letter, one number, and one special character.

2. What is the Password Expiration period on SPAN VA?

The SpanVA password does not expire.

3. What is the session timeout period in case the system is left idle?

SpanVA Login inactivity timer is set to 60 minutes and is not configurable.

Additional Information

SpanVA version 1.15.3.150.0 adds capability to use single sign-on (SSO) with Broadcom Okta.

CloudSOC administrators can now assign SSO permissions to other CloudSOC administrators. 

https://techdocs.broadcom.com/us/en/symantec-security-software/information-security/symantec-cloudsoc/cloud/release-notes/SpanVA-Release-Notes/spanva-rn-150.html

SpanVA Password Management Tech Docs:

https://techdocs.broadcom.com/us/en/symantec-security-software/information-security/symantec-cloudsoc/cloud/spanva-home/managing-the-spanva-instance/resetting-the-password.html