STIGQter: STIG Summary: Riverbed NetProfiler Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 24 Jul 2024:

The Riverbed NetProfiler must be configured to limit the number of concurrent sessions to one for the locally defined administrator account.

DISA Rule

SV-256071r960735_rule

Vulnerability Number

V-256071

Group Title

SRG-APP-000001-NDM-000200

Rule Version

RINP-DM-000001

Severity

CAT III

CCI(s)

• CCI-000054 - Limit the number of concurrent sessions for each organization-defined account and/or account type to an organization-defined number.

Weight

10

Fix Recommendation

Go to Administration >> Account Management >> User Accounts.

Click "Settings".

Under "Log-in Settings", check the "Allow only one log-in per user name/password combination" box.

Click "OK" to save the settings.

Check Contents

Go to Administration >> Account Management >> User Accounts.

Click "Settings".

Check under "Log-in Settings".

If the "Allow only one log-in per user name/password combination" box is not checked, this is a finding.

Vulnerability Number

V-256071

Documentable

False

Rule Version

RINP-DM-000001

Severity Override Guidance

Go to Administration >> Account Management >> User Accounts.

Click "Settings".

Check under "Log-in Settings".

If the "Allow only one log-in per user name/password combination" box is not checked, this is a finding.

Check Content Reference

M

Target Key

5514