STIGQter STIGQter: STIG Summary: Nutanix Acropolis Application Server Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 Jan 2026:

Nutanix AOS must automatically terminate a user session after a maximum of 15 minutes for nonprivileged users.

DISA Rule

SV-279416r1191034_rule

Vulnerability Number

V-279416

Group Title

SRG-APP-000295-AS-000263

Rule Version

NXAC-AS-000002

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Configure the Nutanix AOS Prism Element WebUI Session Idle timeout and Override settings.

1. Log in to Prism Element.
2. Click the gear icon in the upper-right corner.
3. Navigate to "UI Settings".
4. Set the "Session Idle Timeout for current User" to 15 Minutes.
5. Set the "Default Session Idle Timeout for Non-Admin Users" to 15 Minutes.
6. Set the "Session Idle Override for Non-Admin Users" to "Deny Override".

Check Contents

Validate the Prism WebUI Session Idle timeout and Timeout Override is set to 15 minutes and Deny Override.

1. Log in to Prism Element.
2. Click the gear icon in the upper-right corner.
3. Navigate to "UI Settings".
4. Verify the "Session Idle Timeout for current User" to 15 Minutes.
5. Verify the "Default Session Idle Timeout for Non-Admin Users" to 15 Minutes.
6. Verify the "Session Idle Override for Non-Admin Users" to "Deny Override".

If the any of the idle timeout settings or override setting do not match the required settings, this is a finding.

Vulnerability Number

V-279416

Documentable

False

Rule Version

NXAC-AS-000002

Severity Override Guidance

Validate the Prism WebUI Session Idle timeout and Timeout Override is set to 15 minutes and Deny Override.

1. Log in to Prism Element.
2. Click the gear icon in the upper-right corner.
3. Navigate to "UI Settings".
4. Verify the "Session Idle Timeout for current User" to 15 Minutes.
5. Verify the "Default Session Idle Timeout for Non-Admin Users" to 15 Minutes.
6. Verify the "Session Idle Override for Non-Admin Users" to "Deny Override".

If the any of the idle timeout settings or override setting do not match the required settings, this is a finding.

Check Content Reference

M

Target Key

5729