STIGQter: STIG Summary: Riverbed NetProfiler Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 24 Jul 2024:

The Riverbed NetProfiler must be configured to terminate all network connections associated with a device management session at the end of the session, or the session must be terminated after 10 minutes of inactivity except to fulfill documented and validated mission requirements.

DISA Rule

SV-256084r961068_rule

Vulnerability Number

V-256084

Group Title

SRG-APP-000190-NDM-000267

Rule Version

RINP-DM-000042

Severity

CAT I

CCI(s)

• CCI-001133 - Terminate the network connection associated with a communications session at the end of the session or after an organization-defined time period of inactivity.

Weight

10

Fix Recommendation

Go to Configuration >> Appliance Security >> Password Security.

Under "Inactivity Timeout", check the "Enable Maximum Inactivity Timeout" box and set the timer for 10 minutes.

Check Contents

Go to Configuration >> Appliance Security >> Password Security.

Under "Inactivity Timeout", verify the "Enable Maximum Inactivity Timeout" box is checked and the timer is set for 10 minutes.

If the inactivity timeout is not enabled, and/or the timer is not set to 10 minutes, this is a finding.

Vulnerability Number

V-256084

Documentable

False

Rule Version

RINP-DM-000042

Severity Override Guidance

Go to Configuration >> Appliance Security >> Password Security.

Under "Inactivity Timeout", verify the "Enable Maximum Inactivity Timeout" box is checked and the timer is set for 10 minutes.

If the inactivity timeout is not enabled, and/or the timer is not set to 10 minutes, this is a finding.

Check Content Reference

M

Target Key

5514