STIGQter STIGQter: STIG Summary: Cisco ISE NDM Security Technical Implementation Guide Version: 2 Release: 4 Benchmark Date: 01 Jul 2026:

The Cisco ISE must limit the number of CLI and GUI sessions to an organization-defined number.

DISA Rule

SV-242607r1026047_rule

Vulnerability Number

V-242607

Group Title

SRG-APP-000001-NDM-000200

Rule Version

CSCO-NM-000010

Severity

CAT III

CCI(s)

Weight

10

Fix Recommendation

Configure the concurrent sessions for the CLI and GUI.

From web admin portal:
1. Choose Administration >> System >>Admin Access >> Settings >> Access.
2. Configure the "Maximum Concurrent Sessions" under "GUI" to be the organization-defined number.
3. Configure the "Maximum Concurrent Sessions" under "CLI" to be one.

Check Contents

From the web Admin portal:
1. Choose Administration >> System >>Admin Access >> Settings >> Access.
2. Verify the "Maximum Concurrent Sessions" under "GUI" Sessions is set to the organization-defined number.
3. Verify the "Maximum Concurrent Sessions" under "CLI" Sessions is set to one (recommended) or an organization-defined number. It is highly recommended the number be minimized to one or two, but this can be based on operational needs.

If the CLI and GUI are not set to limit the maximum number of sessions, this is a finding.

Vulnerability Number

V-242607

Documentable

False

Rule Version

CSCO-NM-000010

Severity Override Guidance

From the web Admin portal:
1. Choose Administration >> System >>Admin Access >> Settings >> Access.
2. Verify the "Maximum Concurrent Sessions" under "GUI" Sessions is set to the organization-defined number.
3. Verify the "Maximum Concurrent Sessions" under "CLI" Sessions is set to one (recommended) or an organization-defined number. It is highly recommended the number be minimized to one or two, but this can be based on operational needs.

If the CLI and GUI are not set to limit the maximum number of sessions, this is a finding.

Check Content Reference

M

Target Key

5384