STIGQter: STIG Summary: Dell OS10 Switch NDM Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 10 Dec 2024:

The Dell OS10 Switch must terminate all network connections associated with a device management session at the end of the session, or the session must be terminated after five minutes of inactivity except to fulfill documented and validated mission requirements.

DISA Rule

SV-269789r1051752_rule

Vulnerability Number

V-269789

Group Title

SRG-APP-000190-NDM-000267

Rule Version

OS10-NDM-000530

Severity

CAT I

CCI(s)

• CCI-001133 - Terminate the network connection associated with a communications session at the end of the session or after an organization-defined time period of inactivity.
• CCI-000370 - Manage configuration settings for organization-defined system components using organization-defined automated mechanisms.

Weight

10

Fix Recommendation

Configure the OS10 Switch to terminate the connection associated with a device management session at the end of the session or after five minutes of inactivity:

OS10(config)# exec-timeout 300

Check Contents

Determine if the network device terminates the connection associated with a device management session at the end of the session or after five minutes of inactivity.

Review the running-configuration. Verify the configuration includes "exec-timeout 300" which disconnects sessions after five minutes of inactivity.

If the network device does not terminate the connection associated with a device management session at the end of the session or after five minutes of inactivity, this is a finding.

Vulnerability Number

V-269789

Documentable

False

Rule Version

OS10-NDM-000530

Severity Override Guidance

Determine if the network device terminates the connection associated with a device management session at the end of the session or after five minutes of inactivity.

Review the running-configuration. Verify the configuration includes "exec-timeout 300" which disconnects sessions after five minutes of inactivity.

If the network device does not terminate the connection associated with a device management session at the end of the session or after five minutes of inactivity, this is a finding.

Check Content Reference

M

Target Key

5666