Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The MDM server must provide a logout functionality to allow the user to manually terminate the session.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-36057 | SRG-APP-221-MDM-053-SRV | SV-47447r1_rule | Medium |
| Description |
|---|
| Manually terminating an application session allows users to immediately depart the physical vicinity of the system they are logged into without the risk of subsequent system users reactivating or continuing their application session. Users who log into the MDM server application must have the ability to manually terminate their application session. |
| STIG | Date |
|---|---|
| Mobile Device Manager Security Requirements Guide | 2013-01-24 |
Details
| Check Text ( C-44296r1_chk ) |
|---|
| Review the MDM server configuration to ensure sessions can be manually terminated. If a session cannot be manually terminated, this is a finding. |
| Fix Text (F-40587r1_fix) |
|---|
| Configure the MDM server to provide a logout functionality to allow the user to manually terminate the session. |