STIGQter: STIG Summary: VMware NSX 4.x Manager NDM Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 30 Jan 2025:

The NSX Manager must terminate all network connections associated with a session after five minutes of inactivity.

DISA Rule

SV-265327r994204_rule

Vulnerability Number

V-265327

Group Title

SRG-APP-000190-NDM-000267

Rule Version

NMGR-4X-000052

Severity

CAT I

CCI(s)

• CCI-001133 - Terminate the network connection associated with a communications session at the end of the session or after an organization-defined time period of inactivity.
• CCI-002007 - Prohibit the use of cached authenticators after an organization-defined time period.

Weight

10

Fix Recommendation

From an NSX Manager shell, run the following commands:

> set service http session-timeout 300
> set cli-timeout 300

Check Contents

From an NSX Manager shell, run the following command:

> get service http | find Session

Expected result:
Session timeout: 300

If the session timeout is not configured to 300 or less, this is a finding.

From an NSX Manager shell, run the following command:

> get cli-timeout

Expected result:
300 seconds

If the CLI timeout is not configured to 300 or less, this is a finding.

Vulnerability Number

V-265327

Documentable

False

Rule Version

NMGR-4X-000052

Severity Override Guidance

From an NSX Manager shell, run the following command:

> get service http | find Session

Expected result:
Session timeout: 300

If the session timeout is not configured to 300 or less, this is a finding.

From an NSX Manager shell, run the following command:

> get cli-timeout

Expected result:
300 seconds

If the CLI timeout is not configured to 300 or less, this is a finding.

Check Content Reference

M

Target Key

5633