STIGQter: STIG Summary: Network WLAN AP-NIPR Management Security Technical Implementation Guide Version: 7 Release: 2 Benchmark Date: 25 Oct 2023:

The network device must terminate all network connections associated with a device management session at the end of the session, or the session must be terminated after 10 minutes of inactivity except to fulfill documented and validated mission requirements.

DISA Rule

SV-243156r916342_rule

Vulnerability Number

V-243156

Group Title

SRG-APP-000190-NDM-000267

Rule Version

WLAN-ND-000500

Severity

CAT I

CCI(s)

• CCI-001133 - Terminate the network connection associated with a communications session at the end of the session or after an organization-defined time period of inactivity.

Weight

10

Fix Recommendation

Configure the network devices to ensure the timeout for unattended administrative access connections is no longer than 10 minutes.

Check Contents

Review the management connection for administrative access and verify the network device is configured to time-out the connection at 10 minutes or less of inactivity.

If the device does not terminate inactive management connections at 10 minutes or less, this is a finding.

Vulnerability Number

V-243156

Documentable

False

Rule Version

WLAN-ND-000500

Severity Override Guidance

Review the management connection for administrative access and verify the network device is configured to time-out the connection at 10 minutes or less of inactivity.

If the device does not terminate inactive management connections at 10 minutes or less, this is a finding.

Check Content Reference

M

Target Key

5392