STIGQter: STIG Summary: HPE Nimble Storage Array NDM Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 24 Jul 2024:

The HPE Nimble must terminate all network connections associated with a device management session at the end of the session, or the session must be terminated after 10 minutes of inactivity.

DISA Rule

SV-252196r961068_rule

Vulnerability Number

V-252196

Group Title

SRG-APP-000190-NDM-000267

Rule Version

HPEN-NM-000110

Severity

CAT I

CCI(s)

• CCI-001133 - Terminate the network connection associated with a communications session at the end of the session or after an organization-defined time period of inactivity.

Weight

10

Fix Recommendation

To set the inactivity timeout to 10 minutes, type "group --edit --inactivity_timeout 10".

Check Contents

Type "group --info | grep inactivity" and review the timeout value. If it is greater than 10 minutes, this is a finding.

Vulnerability Number

V-252196

Documentable

False

Rule Version

HPEN-NM-000110

Severity Override Guidance

Type "group --info | grep inactivity" and review the timeout value. If it is greater than 10 minutes, this is a finding.

Check Content Reference

M

Target Key

5460