The TippingPoint SMS must disable auto reconnect after disconnect.
An XCCDF Rule
Description
Device management includes the ability to control the number of administrators and management sessions that manage a device. Requiring authentication for auto reconnecting expired administrator sessions is a best practice that lowers the risk of DoS attacks.
- ID
- SV-242233r960735_rule
- Version
- TIPP-NM-000012
- Severity
- Low
- References
- Updated
Remediation Templates
A Manual Procedure
1. Log in to the SMS client.
2. Select >> "Edit" >> "Preferences". Select "Security" Under "Client Preferences". Uncheck "Auto reconnect client to server after a disconnect occurs".
3. Click OK.