STIGQter: STIG Summary: NetApp ONTAP DSC 9.x Security Technical Implementation Guide Version: 2 Release: 4 Benchmark Date: 01 Jul 2026:

ONTAP must be configured to limit the number of concurrent sessions.

DISA Rule

SV-246922r1156802_rule

Vulnerability Number

V-246922

Group Title

SRG-APP-000001-NDM-000200

Rule Version

NAOT-AC-000001

Severity

CAT II

CCI(s)

• CCI-000054 - Limit the number of concurrent sessions for each organization-defined account and/or account type to an organization-defined number.

Weight

10

Fix Recommendation

Configure session limits with the command, "security session limit modify -max-active-limit 3 -interface cli -category application".

Check Contents

Use "security session limit show -interface cli" to check the concurrent session limit.

If the security session limit is not configured to limit the number of concurrent sessions to 3, this is a finding.

Vulnerability Number

V-246922

Documentable

False

Rule Version

NAOT-AC-000001

Severity Override Guidance

Use "security session limit show -interface cli" to check the concurrent session limit.

If the security session limit is not configured to limit the number of concurrent sessions to 3, this is a finding.

Check Content Reference

M

Target Key

5415