STIGQter: STIG Summary: Arista MLS EOS 4.X NDM Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 02 Apr 2025:

The Arista network device must limit the number of concurrent sessions to an organization-defined number for each administrator account and/or administrator account type.

DISA Rule

SV-255947r960735_rule

Vulnerability Number

V-255947

Group Title

SRG-APP-000001-NDM-000200

Rule Version

ARST-ND-000010

Severity

CAT II

CCI(s)

• CCI-000054 - Limit the number of concurrent sessions for each organization-defined account and/or account type to an organization-defined number.

Weight

10

Fix Recommendation

Configure the switch to limit SSH concurrent connections to the device with the following commands:

switch#configure
switch(config)#management ssh
switch(config-mgmt-ssh)#connection limit 5
switch(config-mgmt-ssh)#exit
switch#wr
!

Check Contents

Verify the device is configured to limit the number of concurrent management sessions with the following commands:

switch#sh run | section management ssh
management ssh
connection limit 5
!

If the Arista network device is not configured to limit the number of SSH concurrent sessions, this is a finding.

Vulnerability Number

V-255947

Documentable

False

Rule Version

ARST-ND-000010

Severity Override Guidance

Verify the device is configured to limit the number of concurrent management sessions with the following commands:

switch#sh run | section management ssh
management ssh
connection limit 5
!

If the Arista network device is not configured to limit the number of SSH concurrent sessions, this is a finding.

Check Content Reference

M

Target Key

5511