STIGQter: STIG Summary: Trend Micro TippingPoint NDM Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 02 Apr 2025:

The TippingPoint SMS must terminate all network connections associated with a device management session at the end of the session, or the session must be terminated after 10 minutes of inactivity except to fulfill documented and validated mission requirements.

DISA Rule

SV-242244r1018626_rule

Vulnerability Number

V-242244

Group Title

SRG-APP-000190-NDM-000267

Rule Version

TIPP-NM-000320

Severity

CAT I

CCI(s)

• CCI-001133 - Terminate the network connection associated with a communications session at the end of the session or after an organization-defined time period of inactivity.

Weight

10

Fix Recommendation

In the SMS client, ensure the SMS inactivity timeouts are configured.

1. Under Security, click Edit and Preferences.
2. Under Client Preferences, check the item "Timeout client session after inactivity" and ensure the Time is set to five minutes.

Check Contents

In the SMS client, ensure the SMS inactivity timeouts are configured.

1. Under Security, click Edit and Preferences.
2. Under Client Preferences, if "Timeout client session after inactivity" is not checked or the Time is not set to five minutes, this is a finding.

Vulnerability Number

V-242244

Documentable

False

Rule Version

TIPP-NM-000320

Severity Override Guidance

In the SMS client, ensure the SMS inactivity timeouts are configured.

1. Under Security, click Edit and Preferences.
2. Under Client Preferences, if "Timeout client session after inactivity" is not checked or the Time is not set to five minutes, this is a finding.

Check Content Reference

M

Target Key

5369