STIGQter: STIG Summary: Nutanix Acropolis GPOS Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 Jan 2026:

Nutanix OS must configure the ClientAliveInterval to "600" and ClientAliveCountMax to "1".

DISA Rule

SV-279530r1192590_rule

Vulnerability Number

V-279530

Group Title

SRG-OS-000279-GPOS-00109

Rule Version

NXAC-OS-000006

Severity

CAT II

CCI(s)

• CCI-002361 - Automatically terminate a user session after organization-defined conditions or trigger events requiring session disconnect.
• CCI-001133 - Terminate the network connection associated with a communications session at the end of the session or after an organization-defined time period of inactivity.

Weight

10

Fix Recommendation

Configure SSH.

1. For AOS, configure SSH then restart the SSH for the changes to take effect.

$ sudo salt-call state.sls security/CVM/sshdCVM
$ sudo systemctl restart sshd

2. For Prism Central, configure SSH, then restart the SSH for the changes to take effect.

$ sudo salt-call state.sls security/PCVM/sshdPCVM
$ sudo systemctl restart sshd

3. For Files, configure SSH, then restart the SSH for the changes to take effect.

$ sudo salt-call state.sls security/AFS/sshdAFS
$ sudo systemctl restart sshd

4. For AHV, configure SSH, then restart the SSH for the changes to take effect.

$ sudo salt-call state.sls security/KVM/sshdKVM
$ sudo systemctl restart sshd

Check Contents

Verify Nutanix OS is configured to terminate all network sessions to meet the more stringent session requirement of privileged sessions using the following command.

$ sudo grep -i clientalive /etc/ssh/sshd_config
ClientAliveInterval 600
ClientAliveCountMax 1

If ClientAliveInterval is not "600" and ClientAliveCountMax is not "1" (or "0" for AHV), this is a finding.

Vulnerability Number

V-279530

Documentable

False

Rule Version

NXAC-OS-000006

Severity Override Guidance

Verify Nutanix OS is configured to terminate all network sessions to meet the more stringent session requirement of privileged sessions using the following command.

$ sudo grep -i clientalive /etc/ssh/sshd_config
ClientAliveInterval 600
ClientAliveCountMax 1

If ClientAliveInterval is not "600" and ClientAliveCountMax is not "1" (or "0" for AHV), this is a finding.

Check Content Reference

M

Target Key

5730