STIGQter: STIG Summary: HPE Nimble Storage Array NDM Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 24 Jul 2024:

The HPE Nimble must limit the number of concurrent sessions to an organization-defined number for each administrator account.

DISA Rule

SV-252201r960735_rule

Vulnerability Number

V-252201

Group Title

SRG-APP-000001-NDM-000200

Rule Version

HPEN-NM-000160

Severity

CAT II

CCI(s)

CCI-000054 - Limit the number of concurrent sessions for each organization-defined account and/or account type to an organization-defined number.

Weight

Fix Recommendation

On the Administration >> Security Policies page in the UI, uncheck "Unlimited" for the number of sessions and specify a new limit.

Check Contents

Verify that in Administration >> Security Policies page in the UI, "Unlimited" for the number of sessions is unchecked and a limit is specified.

If a limit is not specified, this is a finding.

Vulnerability Number

V-252201

Documentable

False

Rule Version

HPEN-NM-000160

Severity Override Guidance

Verify that in Administration >> Security Policies page in the UI, "Unlimited" for the number of sessions is unchecked and a limit is specified.

If a limit is not specified, this is a finding.

Check Content Reference

Target Key

5460