STIGhubSTIGhub
STIGhub— A free STIG search and compliance tool·STIGs updated just now
Powered by Pylon·Privacy·Terms·Feedback·© 2026 Beacon Cloud Solutions, Inc.
← MA-4 (7) — Disconnect Verification

CCI-002891

Definition

Verify session and network connection termination after the completion of nonlocal maintenance and diagnostic sessions.

Parent Control

MA-4 (7)Disconnect VerificationMaintenance

Linked STIG Checks (14)

V-274050CAT IIAmazon Linux 2023 must be configured so that all network connections associated with SSH traffic are terminated after 10 minutes of becoming unresponsive.Amazon Linux 2023 Security Technical Implementation GuideV-268142CAT IINixOS must terminate all SSH connections after 10 minutes of becoming unresponsive.Anduril NixOS Security Technical Implementation GuideV-222564CAT IIApplications used for non-local maintenance sessions must verify remote disconnection at the termination of non-local maintenance and diagnostic sessions.Application Security and Development Security Technical Implementation GuideV-269419CAT IIAlmaLinux OS 9 must be configured so that all network connections associated with SSH traffic are terminated after 10 minutes of becoming unresponsive.Cloud Linux AlmaLinux OS 9 Security Technical Implementation GuideV-203738CAT IIThe operating system must verify remote disconnection at the termination of nonlocal maintenance and diagnostic sessions, when used for nonlocal maintenance sessions.General Purpose Operating System Security Requirements GuideV-205581CAT IIMainframe Products must verify remote disconnection at the termination of nonlocal maintenance and diagnostic sessions.Mainframe Product Security Requirements GuideV-285319CAT IIWindows Server 2025 OpenSSH must be configured so that all network connections associated with SSH traffic are terminated after 10 minutes of becoming unresponsive.Microsoft Windows Server 2025 Security Technical Implementation GuideV-271710CAT IIOL 9 must be configured so that all network connections associated with SSH traffic are terminated after 10 minutes of becoming unresponsive.Oracle Linux 9 Security Technical Implementation GuideV-281296CAT IIRHEL 10 must be configured with a timeout interval for the Secure Shell (SSH) daemon.Red Hat Enterprise Linux 10 Security Technical Implementation GuideV-257996CAT IIRHEL 9 must be configured so that all network connections associated with SSH traffic are terminated after 10 minutes of becoming unresponsive.Red Hat Enterprise Linux 9 Security Technical Implementation GuideV-234556CAT IIThe UEM server must verify remote disconnection when non-local maintenance and diagnostic sessions are terminated.Unified Endpoint Management Server Security Requirements GuideV-256503CAT IIThe Photon operating system must use an OpenSSH server version that does not support protocol 1.VMware vSphere 7.0 vCenter Appliance Photon OS Security Technical Implementation GuideV-258830CAT IIThe Photon operating system must terminate idle Secure Shell (SSH) sessions after 15 minutes.VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 Security Technical Implementation GuideV-269572CAT IXylok Security Suite must expire a session upon browser closing.Xylok Security Suite 20.x Security Technical Implementation Guide