STIGQter: STIG Summary: Samsung SDS EMM Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 27 Jul 2022:

The Samsung SDS EMM must limit the number of concurrent sessions to one session for all accounts and/or account types.

DISA Rule

SV-225654r835013_rule

Vulnerability Number

V-225654

Group Title

PP-MDM-431010

Rule Version

SSDS-00-200070

Severity

CAT II

CCI(s)

• CCI-000054 - Limit the number of concurrent sessions for each organization-defined account and/or account type to an organization-defined number.

Weight

10

Fix Recommendation

Configure the Samsung SDS EMM to limit the number of concurrent sessions to one session all accounts and/or account types.

On the MDM console, do the following:
1. Log in to the Admin Console using a web browser.
2. Go to Setting >> Server >> Configuration and check Multiple login as "Disallow."

Check Contents

Review the Samsung SDS EMM configuration settings and verify the server is configured to limit the number of concurrent sessions to one session for all accounts and/or account types.

On the MDM console, do the following:
1. Log in to the Admin Console using a web browser.
2. Go to Setting >> Server >> Configuration and verify Multiple login is set to "Disallow."

If the MDM console Multiple login is not set to "Disallow", this is a finding.

Vulnerability Number

V-225654

Documentable

False

Rule Version

SSDS-00-200070

Severity Override Guidance

Review the Samsung SDS EMM configuration settings and verify the server is configured to limit the number of concurrent sessions to one session for all accounts and/or account types.

On the MDM console, do the following:
1. Log in to the Admin Console using a web browser.
2. Go to Setting >> Server >> Configuration and verify Multiple login is set to "Disallow."

If the MDM console Multiple login is not set to "Disallow", this is a finding.

Check Content Reference

M

Target Key

4216