STIGQter: STIG Summary: Nokia Service Router OS 25.x Network Device Management Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Apr 2026:

The Nokia router must limit the number of concurrent management sessions to a maximum of three for each administrator account and/or administrator account type.

DISA Rule

SV-283760r1203325_rule

Vulnerability Number

V-283760

Group Title

SRG-APP-000001-NDM-000200

Rule Version

NOKI-ND-000010

Severity

CAT II

CCI(s)

CCI-000054 - Limit the number of concurrent sessions for each organization-defined account and/or account type to an organization-defined number.

Weight

Fix Recommendation

Configure the Nokia router to limit the number of concurrent management sessions to a maximum of "3" sessions, as shown in the example below:

SSH example:
- configure system login-control ssh inbound-max-sessions 3

- configure system login-control ssh outbound-max-sessions 3

Check Contents

Review the Nokia router configuration to determine if concurrent management sessions are limited, as shown in the example below:

SSH example:
Use the command below to get into the correct configuration context:

- exit all
- configure system login-control ssh
- info detail | match inbound-max-sessions

inbound-max-sessions 3

- info detail | match outbound-max-sessions

outbound-max-sessions 3

If "inbound-max-sessions" is not set to "3" or less, this is a finding.

If "outbound-max-sessions" is not set to "3" or less, this is a finding.

The Nokia router must limit the number of concurrent management sessions to a maximum of three for each administrator account and/or administrator account type.

DISA Rule

Vulnerability Number

Group Title

Rule Version

Severity

CCI(s)

Weight

Fix Recommendation

Check Contents

Vulnerability Number

Documentable

Rule Version

Severity Override Guidance

Check Content Reference

Target Key