STIGQter STIGQter: STIG Summary: Nutanix Acropolis Application Server Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 Jan 2026:

Nutanix VMM must terminate UI network connections associated with a communications session at the end of the session for in-band management sessions (privileged sessions), the session must be terminated after 10 minutes of inactivity.

DISA Rule

SV-279441r1191109_rule

Vulnerability Number

V-279441

Group Title

SRG-APP-000400-AS-000246

Rule Version

NXAC-AS-000036

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Configure the Nutanix AOS session timeout settings to 10 minutes.

1. Log in to Prism Element.
2. Click the gear icon in the upper-right corner.
3. Navigate to "UI Settings" in the left navigation pane.
4. Set the session timeout settings to 10 minutes per user type.

Check Contents

Confirm the Nutanix AOS session timeout settings are set to 10 minutes.

1. Log in to Prism Element.
2. Click the gear icon in the upper-right corner.
3. Navigate to "UI Settings" in the left navigation pane.

For each user type, verify the session timeout is set correctly. If not, this is a finding.

Vulnerability Number

V-279441

Documentable

False

Rule Version

NXAC-AS-000036

Severity Override Guidance

Confirm the Nutanix AOS session timeout settings are set to 10 minutes.

1. Log in to Prism Element.
2. Click the gear icon in the upper-right corner.
3. Navigate to "UI Settings" in the left navigation pane.

For each user type, verify the session timeout is set correctly. If not, this is a finding.

Check Content Reference

M

Target Key

5729