STIGQter: STIG Summary: HP FlexFabric Switch NDM Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 24 Jul 2020:

Network devices must provide a logoff capability for administrator-initiated communication sessions.

DISA Rule

SV-80715r1_rule

Vulnerability Number

V-66225

Group Title

SRG-APP-000296-NDM-000280

Rule Version

HFFS-ND-000082

Severity

CAT II

CCI(s)

• CCI-002363 - The information system provides a logout capability for user-initiated communications sessions whenever authentication is used to gain access to organization-defined information resources.

Weight

10

Fix Recommendation

Configure the HP FlexFabric Switch to provide a logoff capability for administrator-initiated communication sessions.

[HP] Ctrl + z
<HP> quit

Check Contents

Review the HP FlexFabric Switch configuration to determine if it provides a logoff capability for administrator-initiated communication sessions.

[HP] display users

Idx Line Idle Time Pid Type
+ 177 VTY 0 00:00:00 May 29 15:45:11 1011 SSH

Following are more details.
VTY 0 :
User name: admin@system
Location: 16.117.204.17
+ : Current operation user.
F : Current operation user works in async mode.

If the HP FlexFabric Switch does not provide a logoff capability for these sessions, this is a finding.

Vulnerability Number

V-66225

Documentable

False

Rule Version

HFFS-ND-000082

Severity Override Guidance

Review the HP FlexFabric Switch configuration to determine if it provides a logoff capability for administrator-initiated communication sessions.

[HP] display users

Idx Line Idle Time Pid Type
+ 177 VTY 0 00:00:00 May 29 15:45:11 1011 SSH

Following are more details.
VTY 0 :
User name: admin@system
Location: 16.117.204.17
+ : Current operation user.
F : Current operation user works in async mode.

If the HP FlexFabric Switch does not provide a logoff capability for these sessions, this is a finding.

Check Content Reference

M

Target Key

2971

Comments