STIGQter: STIG Summary: HPE Alletra Storage ArcusOS Web Server Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 Feb 2026:

The HPE Alletra Storage ArcusOS device must set an inactive timeout for sessions.

DISA Rule

SV-283037r1193801_rule

Vulnerability Number

V-283037

Group Title

SRG-APP-000295-WSR-000134

Rule Version

ASMP-WS-000730

Severity

CAT II

CCI(s)

CCI-002361 - Automatically terminate a user session after organization-defined conditions or trigger events requiring session disconnect.

Weight

Fix Recommendation

Configure the WSAPI Session Timeout to a value less than or equal to 10 minutes:

cli% setwsapi -timeout 10

Check Contents

Verify the WSAPI Session Timeout value is set with the following command:

%cli showwsapi -d

-------------------------------WSAPI Server Configuration--------------------------------
service State: Enabled
HPE GreenLake for Block Storage UI State: Active
server State: Active
HTTPS Port: 443
Number of Sessions Created: 0
System Resource Usage: 96
Number of Sessions Active: 0
Version: 1.14.0
Event Stream State: Enabled
Max Number of SSE Sessions Allowed: 5
Number of SSE Sessions Created: 0
Number of SSE Sessions Active: 0
Session Timeout: 10 Minutes
Policy : per_user_limit
API URL: https://s2475-cluster.lr4-storage.net/api/v1

If "Session Timeout" is set to a value greater than "10 minutes", this is a finding.

The HPE Alletra Storage ArcusOS device must set an inactive timeout for sessions.

DISA Rule

Vulnerability Number

Group Title

Rule Version

Severity

CCI(s)

Weight

Fix Recommendation

Check Contents

Vulnerability Number

Documentable

Rule Version

Severity Override Guidance

Check Content Reference

Target Key