The MDM server must terminate all sessions and network connections when non-local maintenance is completed.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-36045	SRG-APP-186-MDM-041-SRV	SV-47434r1_rule		Medium

Description
In the event the remote node has abnormally terminated or an upstream link from the MDM server is down, the management session will be terminated; thereby, freeing device resources and eliminating any possibility of an unauthorized user being orphaned to an open idle session of the MDM server.

STIG	Date
Mobile Device Manager Security Requirements Guide	2013-01-24

Details

Check Text ( C-44284r1_chk )
Review the MDM server configuration to determine whether the system is configured to terminate all sessions and network connections when non-local maintenance is completed. If the MDM server is not set to terminate these sessions, this is a finding.

Fix Text (F-40575r1_fix)
Configure the MDM server to terminate all sessions and network connections when non-local maintenance is completed.