STIGQter: STIG Summary: Akamai KSD Service Impact Level 2 NDM Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 12 Sep 2017:

The Akamai Luna Portal must initiate a session logoff after a 15-minute period of inactivity.

DISA Rule

SV-91157r1_rule

Vulnerability Number

V-76461

Group Title

SRG-APP-000003-NDM-000202

Rule Version

AKSD-DM-000007

Severity

CAT II

CCI(s)

• CCI-000057 - The information system initiates a session lock after the organization-defined time period of inactivity.

Weight

10

Fix Recommendation

Configure the session timeout duration to 15 minutes:

1. Log in to the Luna Portal as an administrator.
2. Select Configure >> Manage Users & Groups.
3. Select each user and set the "Timeout" value to "After 15 Minutes".

Check Contents

Verify that all portal users have the session timeout duration set to 15 minutes:

1. Log in to the Luna Portal as an administrator.
2. Select Configure >> Manage Users & Groups.
3. Select each administrator and inspect the "Timeout" setting to verify it reads "After 15 Minutes".
4. Click "Save" button.

If any user has a "Timeout" value other than "After 15 Minutes", this is a finding.

Vulnerability Number

V-76461

Documentable

False

Rule Version

AKSD-DM-000007

Severity Override Guidance

Verify that all portal users have the session timeout duration set to 15 minutes:

1. Log in to the Luna Portal as an administrator.
2. Select Configure >> Manage Users & Groups.
3. Select each administrator and inspect the "Timeout" setting to verify it reads "After 15 Minutes".
4. Click "Save" button.

If any user has a "Timeout" value other than "After 15 Minutes", this is a finding.

Check Content Reference

M

Target Key

3167

Comments