STIGQter: STIG Summary: Trend Micro TippingPoint NDM Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 02 Apr 2025:

The TippingPoint SMS must limit the maximum number of concurrent active sessions to one for the account of last resort.

DISA Rule

SV-242231r960735_rule

Vulnerability Number

V-242231

Group Title

SRG-APP-000001-NDM-000200

Rule Version

TIPP-NM-000010

Severity

CAT III

CCI(s)

• CCI-000054 - Limit the number of concurrent sessions for each organization-defined account and/or account type to an organization-defined number.

Weight

10

Fix Recommendation

1. Log in to the SMS client.
2. Select >> "Edit" >> "Preferences". Select "Security" under "Session Preferences". Click the check box for "Limit number of total and user sessions".
3. Type 1 for the number of active sessions allowed for a user.
4. Click OK.

Check Contents

1. Log in to the SMS client.
2. Select >> "Edit" >> "Preferences". Select "Security" under "Session Preferences".
3. Verify the setting for the "limit number of total and user sessions" option is checked.
4. Verify the active sessions allowed for a user option has a numeric value of 1.

If the TippingPoint SMS does limit the maximum number of concurrent active sessions to one for the account of last resort, this is a finding.

Vulnerability Number

V-242231

Documentable

False

Rule Version

TIPP-NM-000010

Severity Override Guidance

1. Log in to the SMS client.
2. Select >> "Edit" >> "Preferences". Select "Security" under "Session Preferences".
3. Verify the setting for the "limit number of total and user sessions" option is checked.
4. Verify the active sessions allowed for a user option has a numeric value of 1.

If the TippingPoint SMS does limit the maximum number of concurrent active sessions to one for the account of last resort, this is a finding.

Check Content Reference

M

Target Key

5369