STIGQter: STIG Summary: Trend Micro TippingPoint NDM Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 02 Apr 2025:

The TippingPoint SMS must limit total number of user sessions for privileged uses to a maximum of 10.

DISA Rule

SV-242232r960735_rule

Vulnerability Number

V-242232

Group Title

SRG-APP-000001-NDM-000200

Rule Version

TIPP-NM-000011

Severity

CAT III

CCI(s)

• CCI-000054 - Limit the number of concurrent sessions for each organization-defined account and/or account type to an organization-defined number.

Weight

10

Fix Recommendation

1. Log in to the SMS client.
2. Select >> "Edit" >> "Preferences". Select "Security" under "Session Preferences". Click the check box for "Limit number of total and user sessions".
3. Type 10 or less for the number of active sessions allowed on SMS.
4. Click OK.

Check Contents

1. Log in to the SMS client.
2. Select >> "Edit" >> "Preferences". Select "Security" under "Session Preferences".
3. Verify the setting for the "limit number of total and user sessions" option is checked.
4. Verify the active sessions allowed on SMS option has a numeric value of 10 or less.

If the TippingPoint SMS does not limit total number of user sessions for privileged uses to a maximum of 10, this is a finding.

Vulnerability Number

V-242232

Documentable

False

Rule Version

TIPP-NM-000011

Severity Override Guidance

1. Log in to the SMS client.
2. Select >> "Edit" >> "Preferences". Select "Security" under "Session Preferences".
3. Verify the setting for the "limit number of total and user sessions" option is checked.
4. Verify the active sessions allowed on SMS option has a numeric value of 10 or less.

If the TippingPoint SMS does not limit total number of user sessions for privileged uses to a maximum of 10, this is a finding.

Check Content Reference

M

Target Key

5369