STIGQter: STIG Summary: Axonius Federal Systems Ax-OS Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 05 Jan 2026:

Ax-OS must automatically terminate a graphical user interface (GUI) user session after 15 minutes.

DISA Rule

SV-276002r1122656_rule

Vulnerability Number

V-276002

Group Title

SRG-APP-000003

Rule Version

AXOS-00-000010

Severity

CAT II

CCI(s)

• CCI-000057 - The information system initiates a session lock after the organization-defined time period of inactivity.
• CCI-001133 - Terminate the network connection associated with a communications session at the end of the session or after an organization-defined time period of inactivity.
• CCI-002361 - Automatically terminate a user session after organization-defined conditions or trigger events requiring session disconnect.

Weight

10

Fix Recommendation

Select the gear icon (System Settings) >> Privacy and Security >> Session.

Under the Session Menu, enable the "Enable session timeout" slide bar.

Set "Session idle timeout (minutes)" to "15".

Click "Save".

Check Contents

Select the gear icon (System Settings) >> Privacy and Security >> Session.

Under the Session Menu, verify the "Enable session timeout" slide bar is enabled.

Verify "Session idle timeout (minutes)" is set to "15".

If "Session idle timeout (minutes)" is not set to 15 minutes or less, this is a finding.

Vulnerability Number

V-276002

Documentable

False

Rule Version

AXOS-00-000010

Severity Override Guidance

Select the gear icon (System Settings) >> Privacy and Security >> Session.

Under the Session Menu, verify the "Enable session timeout" slide bar is enabled.

Verify "Session idle timeout (minutes)" is set to "15".

If "Session idle timeout (minutes)" is not set to 15 minutes or less, this is a finding.

Check Content Reference

M

Target Key

5710