STIGQter: STIG Summary: HPE Aruba Networking AOS NDM Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 22 Oct 2024:

AOS must limit the number of concurrent sessions to a maximum of three for each administrator account and/or administrator account type.

DISA Rule

SV-266903r1039730_rule

Vulnerability Number

V-266903

Group Title

SRG-APP-000001-NDM-000200

Rule Version

ARBA-ND-000200

Severity

CAT II

CCI(s)

CCI-000054 - Limit the number of concurrent sessions for each organization-defined account and/or account type to an organization-defined number.

Weight

Fix Recommendation

Configure AOS with the following commands:
configure terminal
mgmt-user admin root max-concurrent-sessions 3
Enter the admin's password
Reenter the admin's password
write memory

Check Contents

Verify the AOS configuration with the following command:
show mgmt-user admin

If "Max-concurrent-sessions" is not set to "3", this is a finding.

Vulnerability Number

V-266903

Documentable

False

Rule Version

ARBA-ND-000200

Severity Override Guidance

Verify the AOS configuration with the following command:
show mgmt-user admin

If "Max-concurrent-sessions" is not set to "3", this is a finding.

Check Content Reference

Target Key

5648