STIGQter: STIG Summary: AvePoint Fly Server Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Apr 2026:

Fly Server must limit the number of concurrent sessions for all accounts and/or account types.

DISA Rule

SV-283924r1206887_rule

Vulnerability Number

V-283924

Group Title

SRG-APP-000001

Rule Version

FLYS-00-000005

Severity

CAT II

CCI(s)

• CCI-000054 - Limit the number of concurrent sessions for each organization-defined account and/or account type to an organization-defined number.

Weight

10

Fix Recommendation

Configure the Fly Server Manager session setting:
- Log on to Fly Server Manager with an admin account.
- On the Management >> General Settings page, click the "System Option" tab.
- Uncheck the "Allow concurrent sessions from multiple servers for the same account" setting.
- Save the setting.

Check Contents

Check the Fly Server Manager session setting:
- Log on to Fly Server Manager with an admin account.
- On the Management >> General Settings page, click the "System Option" tab.
- Verify the "Allow concurrent sessions from multiple servers for the same account" setting.

If this setting is checked, this is a finding.

Vulnerability Number

V-283924

Documentable

False

Rule Version

FLYS-00-000005

Severity Override Guidance

Check the Fly Server Manager session setting:
- Log on to Fly Server Manager with an admin account.
- On the Management >> General Settings page, click the "System Option" tab.
- Verify the "Allow concurrent sessions from multiple servers for the same account" setting.

If this setting is checked, this is a finding.

Check Content Reference

M

Target Key

5747