The network element must limit the number of concurrent sessions for each account to an organizationally defined number.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| SRG-NET-000053-RTR-NA | SRG-NET-000053-RTR-NA | SRG-NET-000053-RTR-NA_rule | Low |
| Description |
|---|
| This requirement addresses concurrent sessions for a given information system account and does not address concurrent sessions by a single user via multiple accounts. Limiting the number of concurrent sessions to the device per any given account mitigates the risk associated with a Denial of Service (DoS) attack. This requirement is applicable to network device management and is not applicable to the routing function. |
| STIG | Date |
|---|---|
| Router Security Requirements Guide | 2013-07-30 |
Details
| Check Text ( C-SRG-NET-000053-RTR-NA_chk ) |
|---|
| This requirement is NA for router. |
| Fix Text (F-SRG-NET-000053-RTR-NA_fix) |
|---|
| This requirement is NA for router. |