STIGQter: STIG Summary: Dell OS10 Switch NDM Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 10 Dec 2024:

The Dell OS10 Switch must limit the number of concurrent sessions to an organization-defined number for each administrator account and/or administrator account type.

DISA Rule

SV-269768r1051689_rule

Vulnerability Number

V-269768

Group Title

SRG-APP-000001-NDM-000200

Rule Version

OS10-NDM-000010

Severity

CAT II

CCI(s)

• CCI-000054 - Limit the number of concurrent sessions for each organization-defined account and/or account type to an organization-defined number.

Weight

10

Fix Recommendation

Configure the network device to limit the number of concurrent sessions to an organization-defined number for all administrator accounts and/or administrator account types, as in the following example.

OS10(config)# login concurrent-session limit 3

Check Contents

Review the network device configuration to verify if the device limits the number of concurrent sessions to an organization-defined number for all administrator accounts and/or administrator account types.

Review the running-configuration. Verify the configuration includes "login concurrent-session limit" followed by the number of sessions defined by the organization.

Note: The default concurrent session limit is 10, so if it is not displayed when viewing the configuration, the limit is set to 10.

If the network device does not limit the number of concurrent sessions to an organization-defined number for each administrator account and/or administrator account type, this is a finding.

Vulnerability Number

V-269768

Documentable

False

Rule Version

OS10-NDM-000010

Severity Override Guidance

Review the network device configuration to verify if the device limits the number of concurrent sessions to an organization-defined number for all administrator accounts and/or administrator account types.

Review the running-configuration. Verify the configuration includes "login concurrent-session limit" followed by the number of sessions defined by the organization.

Note: The default concurrent session limit is 10, so if it is not displayed when viewing the configuration, the limit is set to 10.

If the network device does not limit the number of concurrent sessions to an organization-defined number for each administrator account and/or administrator account type, this is a finding.

Check Content Reference

M

Target Key

5666