STIGQter: STIG Summary: RUCKUS ICX NDM Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 27 May 2025:

The RUCKUS ICX device must terminate all network connections associated with a device management session at the end of the session, or the session must be terminated after five minutes of inactivity except to fulfill documented and validated mission requirements.

DISA Rule

SV-273809r1110832_rule

Vulnerability Number

V-273809

Group Title

SRG-APP-000190-NDM-000267

Rule Version

RCKS-NDM-000520

Severity

CAT I

CCI(s)

• CCI-001133 - Terminate the network connection associated with a communications session at the end of the session or after an organization-defined time period of inactivity.

Weight

10

Fix Recommendation

Configure CLI timeout to five minutes or less (default is 2 min):

SSH@ICX(config)#cli timeout 5

Check Contents

Check CLI configuration:

SSH@ICX(config)#show cli config

CLI Session Configuration
session timeout : 5 min
skip-page mode : disabled
skip-page config : disabled
rconsole-off : disabled
alias :
There are no entries in the alias list.

If the idle timeout is greater than five minutes or equal to 0 (i.e., no timeout), this is a finding.

Vulnerability Number

V-273809

Documentable

False

Rule Version

RCKS-NDM-000520

Severity Override Guidance

Check CLI configuration:

SSH@ICX(config)#show cli config

CLI Session Configuration
session timeout : 5 min
skip-page mode : disabled
skip-page config : disabled
rconsole-off : disabled
alias :
There are no entries in the alias list.

If the idle timeout is greater than five minutes or equal to 0 (i.e., no timeout), this is a finding.

Check Content Reference

M

Target Key

5695