STIGQter: STIG Summary: Fortinet FortiGate Firewall NDM Security Technical Implementation Guide Version: 1 Release: 5 Benchmark Date: 05 Jan 2026:

The FortiGate device must generate unique session identifiers using a FIPS 140-2-approved random number generator.

DISA Rule

SV-234215r1043181_rule

Vulnerability Number

V-234215

Group Title

SRG-APP-000224-NDM-000270

Rule Version

FGFW-ND-000280

Severity

CAT II

CCI(s)

• CCI-001188 - Generate a unique session identifier for each session with organization-defined randomness requirements.

Weight

10

Fix Recommendation

Log in to the FortiGate GUI with Super-Admin privilege.

1. Open a CLI console, via SSH or available from the GUI.
2. Run the following command:
# config system fips-cc
# set status enable
# end

Check Contents

Session IDs are generated using the FIPS random generator if the device is in FIPS mode.

To verify login to the FortiGate GUI with Super-Admin privilege:

1. Open a CLI console, via SSH or available from the GUI.
2. Run the following command:
# get system status | grep -i fips
The output should be:
FIPS-CC mode: enable

If FIPS-CC mode parameter is not set to enable, this is a finding.

Vulnerability Number

V-234215

Documentable

False

Rule Version

FGFW-ND-000280

Severity Override Guidance

Session IDs are generated using the FIPS random generator if the device is in FIPS mode.

To verify login to the FortiGate GUI with Super-Admin privilege:

1. Open a CLI console, via SSH or available from the GUI.
2. Run the following command:
# get system status | grep -i fips
The output should be:
FIPS-CC mode: enable

If FIPS-CC mode parameter is not set to enable, this is a finding.

Check Content Reference

M

Target Key

5260