STIGQter STIGQter: STIG Summary: IBM DataPower Network Device Management Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 24 Oct 2017:

The DataPower Gateway must automatically terminate a network administrator session after organization-defined conditions or trigger events requiring session disconnect.

DISA Rule

SV-79611r2_rule

Vulnerability Number

V-65121

Group Title

SRG-APP-000295-NDM-000279

Rule Version

WSDP-NM-000081

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

For the Web Management service used by an administrator, configure an idle timeout (Objects >> Device Management >> Web Management Service): The time after which to invalidate idle administrator sessions. When invalidated, the web interface requires reauthentication.

For the SSH command-line interface used by an administrator, use the web interface (Objects >> Crypto Configuration >> SSH Client Profile) to configure an SSH Client Profile for the administrator user ID. Configure the "Persistent Idle Timeout" to 900 or less.

Check Contents

Objects >> Device Management >> Web Management Service >> Idle timeout is set to 900 or less.

Review the administrator's SSH Client Profile: Objects >> Crypto Configuration >> SSH Client Profile >> "Persistent Idle Timeout" is set to 900 or less. If it is not, this is a finding.

Vulnerability Number

V-65121

Documentable

False

Rule Version

WSDP-NM-000081

Severity Override Guidance

Objects >> Device Management >> Web Management Service >> Idle timeout is set to 900 or less.

Review the administrator's SSH Client Profile: Objects >> Crypto Configuration >> SSH Client Profile >> "Persistent Idle Timeout" is set to 900 or less. If it is not, this is a finding.

Check Content Reference

M

Target Key

2861

Comments