Tools
Configuration settings in Serv-U now enabled in 15.5.3
Security configuration settings enabled by default in Serv-U 15.5.3 and above
First published date
Last published date
Overview
In a continuing effort to strengthen Serv-U's security posture, some settings previously not set are now enabled by default.
These newly set default settings are applicable only to fresh installations of Serv-U 15.5.3 onwards, and can be changed as desired.
In upgrade installations, formerly applied settings are preserved.
Product section
Resolution
Below are the affected settings and values applied.
1. For Server, the “Block users who connect more than" composite setting changed to:
Switched: ON
Connect more than times: 4
Within seconds: 30s
For minutes: 15 min
2. Connection settings changed,
a. Maximum number of sessions per user account : 20
b. Maximum number of sessions per user account per IP : 20
3. Password settings changed,
a. Require complex passwords: Yes
b. Minimum password length: 10
4. MFA now enabled on fresh installations by default.