STIGQter STIGQter: STIG Summary: Nutanix Acropolis Application Server Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 Jan 2026:

Nutanix AOS must limit the number of concurrent sessions to 10 for all accounts and/or account types.

DISA Rule

SV-279415r1191367_rule

Vulnerability Number

V-279415

Group Title

SRG-APP-000001-AS-000001

Rule Version

NXAC-AS-000001

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Set max concurrent connections to 10 by running the following command:

$ configure_dod_mode.sh enter_dod_mode

Check Contents

Verify DODIN mode is enabled to ensure maximum concurrent session is limited to 10.

1. For AOS, run the following command:

$ ncli cluster get-cvm-security-config
Enable DoDin Additiona... : true

2. For Prism Central, run the following command:

$ ncli cluster get-pcvm-security-config
Enable DoDin Additiona... : true

3. For Files, run the following command:

$ ncli cluster get-afs-security-config
Enable DoDin Additiona... : true

If the value for "Enable DoDin Additional" is not set to "True", this is a finding.

Vulnerability Number

V-279415

Documentable

False

Rule Version

NXAC-AS-000001

Severity Override Guidance

Verify DODIN mode is enabled to ensure maximum concurrent session is limited to 10.

1. For AOS, run the following command:

$ ncli cluster get-cvm-security-config
Enable DoDin Additiona... : true

2. For Prism Central, run the following command:

$ ncli cluster get-pcvm-security-config
Enable DoDin Additiona... : true

3. For Files, run the following command:

$ ncli cluster get-afs-security-config
Enable DoDin Additiona... : true

If the value for "Enable DoDin Additional" is not set to "True", this is a finding.

Check Content Reference

M

Target Key

5729