Re: Login Issues at QPWDLVL 2 for some users

[Steve Martinson <smartinson66@xxxxxxxxx>]

Remember, too, that if this is a system that is "in-scope" for the PCI DSS,
all connections to the machine *must* be secure:

*Requirement 8.4** – Render all passwords unreadable during transmission and
storage on all system components using strong cryptography.*

*
*

So for regular TELNET, while it could hypothetically pass a PCI assessment
for Requirement 2.3 for all non-administrative users, later down the road
(Requirement 8 controls) you would end up failing anyway because of the
passwords not being encrypted over the network during transmission (whether
it's admin-level access or not).