The TippingPoint SMS must disable auto reconnect after disconnect.

Overview

Finding IDVersionRule IDIA ControlsSeverity
V-242233TIPP-NM-000012SV-242233r960735_ruleCCI-000054low
Description
Device management includes the ability to control the number of administrators and management sessions that manage a device. Requiring authentication for auto reconnecting expired administrator sessions is a best practice that lowers the risk of DoS attacks.
STIGDate
Trend Micro TippingPoint NDM Security Technical Implementation Guide2025-03-10

Details

Check Text (C-242233r960735_chk)

1. Log in to the SMS client. 2. Select >> "Edit" >> "Preferences". Select "Security" Under "Client Preferences". 3. Verify the option for "Auto reconnect client to server after a disconnect occurs" is unchecked. If the TippingPoint SMS does not disable auto reconnect after disconnect, this is a finding.

Fix Text (F-45466r710705_fix)

1. Log in to the SMS client. 2. Select >> "Edit" >> "Preferences". Select "Security" Under "Client Preferences". Uncheck "Auto reconnect client to server after a disconnect occurs". 3. Click OK.