STIGQter: STIG Summary: ISEC7 EMM Suite v6.x Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 23 Aug 2019:

The ISEC7 EMM Suite must configure the timeout for the console to be 15 minutes or less.

DISA Rule

SV-106377r1_rule

Vulnerability Number

V-97263

Group Title

SRG-APP-000516

Rule Version

ISEC-06-002520

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Log in to the ISEC7 EMM Console.
Navigate to Administration >> Configuration >> Apache Tomcat.
Set the session timeout to the correct value of 15 minutes or less.

Check Contents

Log in to the ISEC7 EMM Console.
Navigate to Administration >> Configuration >> Apache Tomcat.
Validate the session timeout has been set to the correct value.

Alternatively, allow the console to sit for 15 minutes and confirm that you are prompted to login once again when attempting to navigate to a new screen.

If the EMM Console timeout has not been set for 15 minutes or less, this is a finding.

Vulnerability Number

V-97263

Documentable

False

Rule Version

ISEC-06-002520

Severity Override Guidance

Log in to the ISEC7 EMM Console.
Navigate to Administration >> Configuration >> Apache Tomcat.
Validate the session timeout has been set to the correct value.

Alternatively, allow the console to sit for 15 minutes and confirm that you are prompted to login once again when attempting to navigate to a new screen.

If the EMM Console timeout has not been set for 15 minutes or less, this is a finding.

Check Content Reference

M

Target Key

3503

Comments