← Back to Axonius Federal Systems Ax-OS Security Technical Implementation Guide

V-276001

CAT II (Medium)

Ax-OS must limit the number of concurrent sessions to 10 for all accounts and/or account types.

Rule ID

SV-276001r1122653_rule

STIG

Axonius Federal Systems Ax-OS Security Technical Implementation Guide

Version

V1R2

CCIs

CCI-000054 CCI-001094 CCI-001095 CCI-002385

Discussion

Operating system management includes the ability to control the number of users and user sessions that utilize an operating system. Limiting the number of allowed users and sessions per user is helpful in reducing the risks related to denial-of-service (DoS) attacks. Satisfies: SRG-APP-000001, SRG-APP-000246, SRG-APP-000247, SRG-APP-000435

Check Content

From the Axonius Toolbox (accessed via Secure Shell [SSH]) Main Actions Menu, select the following options:

Compliance Actions >> Advanced Compliance Actions >> Maximum Concurrent Logins

If "Current Status: Disable" is shown, this is a finding.

Fix Text

From the Axonius Toolbox (accessed via SSH) Main Actions Menu, select the following options:

Compliance Actions >> Advanced Compliance Actions >> Maximum Concurrent Logins >> Enable