Network management/maintenance ports are not configured to “force out” or drop any user session that is interrupted for more than 15 seconds.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-8516	DSN18.17	SV-9011r1_rule	ECSC-1	Medium

Description

Requirement: The IAO will ensure that network connected management ports drop a connection that is interrupted for any reason within 15 seconds. Network ports that are interrupted due to link disconnection, power failure or other reasons must end any session using that connection. This will prevent a user from ending a session without logging off and leaving the maintenance port available with an active session that might allow unauthorized use by someone other than the authenticated user.

STIG	Date
Defense Switched Network STIG	2015-01-02

Details

Check Text ( C-7302r1_chk )
Interview the IAO and/or SA to confirm compliance through discussion, review of site policy and procedures, diagrams, documentation, configuration files, logs, records, DAA/other approvals, etc as applicable

Fix Text (F-7968r1_fix)
Implement processes / procedures, generate documents, and/or adjust configuration(s) / architecture, as necessary to comply with policy.