STIGQter: STIG Summary: F5 NGINX Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 25 Nov 2025:

NGINX must limit the number of concurrent sessions to an organization-defined number for all accounts and/or account types.

DISA Rule

SV-278380r1172745_rule

Vulnerability Number

V-278380

Group Title

SRG-APP-000001

Rule Version

NGNX-APP-000010

Severity

CAT II

CCI(s)

• CCI-000054 - Limit the number of concurrent sessions for each organization-defined account and/or account type to an organization-defined number.

Weight

10

Fix Recommendation

Determine the path to NGINX config file(s):

nginx -qT | grep "# configuration"
# configuration file /etc/nginx/nginx.conf:

Note: The default NGINX configuration is "/etc/nginx/nginx.conf", though various files may also be included.

Add or modify the number of "worker_connections" based on the needs of the application.

Note: By default, NGINX limits the number of concurrent connections to 512 per worker process, and the number of worker processes is equal the number of CPUs present. This results in a maximum number of connections equal to "worker_connections" multiplied by the number of "worker_processes". In a proxy configuration, NGINX will use a connection on both the client side and the server side. This results in two connections for each client side connection.

Restart NGINX:

systemctl restart nginx

Check Contents

Determine path to NGINX config file(s):

nginx -qT | grep "# configuration"
# configuration file /etc/nginx/nginx.conf:

Note: The default NGINX configuration is "/etc/nginx/nginx.conf", though various files may also be included.

nginx -c <path to nginx config> -qT | grep worker_connections
worker_connections 512;

Verify "worker_connections" is set in the configuration to an organization-defined number.

If the "worker_connections" is not set to an organization-defined number, this is a finding.

Vulnerability Number

V-278380

Documentable

False

Rule Version

NGNX-APP-000010

Severity Override Guidance

Determine path to NGINX config file(s):

nginx -qT | grep "# configuration"
# configuration file /etc/nginx/nginx.conf:

Note: The default NGINX configuration is "/etc/nginx/nginx.conf", though various files may also be included.

nginx -c <path to nginx config> -qT | grep worker_connections
worker_connections 512;

Verify "worker_connections" is set in the configuration to an organization-defined number.

If the "worker_connections" is not set to an organization-defined number, this is a finding.

Check Content Reference

M

Target Key

5720