Zeiss CLARUS 500 Instructions For Use Manual page 91

Instructions for Use
CLARUS® 500
Interactive logon: Require Domain Controller authentication to unlock
workstation
Interactive logon: Require smart card
Interactive logon: Smart card removal behavior
Load and unload device drivers
Lock pages in memory
Manage auditing and security log Administrators Maximum password age
Microsoft network client: Digitally sign communications (always)
Microsoft network client: Digitally sign communications (if server agrees)
Microsoft network client: Send unencrypted password to third-party SMB servers
Microsoft network server: Amount of idle time required before suspending
session
Microsoft network server: Digitally sign communications (if client agrees)
Microsoft network server: Server SPN target name validation level
Minimize the number of simultaneous connections to the Internet or a Windows
Domain
Minimum password age
Minimum password length
Minimum PIN length Minimum
PIN length
Modify an object label
Modify firmware environment values
MSS: (AutoAdminLogon) Enable Automatic Logon (not recommended)
MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects
against packet spoofing)
DisableIPSourceRoutingIPv6
MSS: (DisableIPSourceRouting) IP source routing protection level (protects against
packet spoofing)
DisableIPSourceRouting
2660021171806 Rev. A 2019-01
Policy
5 Configuration
5.11 System Administration
Setting
Disabled
Disabled
No Action
Administrators
No One
60 days
Disabled
Enabled
Disabled
15 minute(s)
Enabled
Accept if
provided by
client
Enabled
1 day(s)
7 character(s)
Enabled
6
No one
Administrators
Disabled
Enabled
Highest
protection, source
routing is
completely
disabled
Enabled
Highest
protection, source
routing is
completely
disabled
91 / 192