Trend Micro TippingPoint NDM Security Technical Implementation Guide

The Trend Micro TippingPoint NDM Security Technical Implementation Guide (V2 R3) has 30 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

30STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R3

CurrentPublished Wed Apr 02 2025 What changed in V2R3

The TippingPoint SMS must disable auto reconnect after disconnect.

Trend Micro TippingPoint NDM Security Technical Implementation Guide

Assessment Title

Rule Text

The TippingPoint SMS must disable auto reconnect after disconnect.

Description

Discussion Text

Device management includes the ability to control the number of administrators and management sessions that manage a device. Requiring authentication for auto reconnecting expired administrator sessions is a best practice that lowers the risk of DoS attacks.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-242233

Rule

SV-242233r960735_rule

Severity

low

Rule Version

TIPP-NM-000012

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

1. Log in to the SMS client. 
2. Select >> "Edit" >> "Preferences". Select "Security" Under "Client Preferences".
3. Verify the option for "Auto reconnect client to server after a disconnect occurs" is unchecked.

If the TippingPoint SMS does not disable auto reconnect after disconnect, this is a finding.

Implementation Procedure

Fix Text

1. Log in to the SMS client. 
2. Select >> "Edit" >> "Preferences". Select "Security" Under "Client Preferences". Uncheck "Auto reconnect client to server after a disconnect occurs". 
3. Click OK.

STIG check 3 of 30 in the Trend Micro TippingPoint NDM STIG checklist

← Previous · V-242232The TippingPoint SMS must limit total number of user sessions for privileged uses to a maximum of 10.Next · V-242234 →The TippingPoint SMS must be configured to enforce the limit of three consecutive invalid logon attempts, after which time it must lock out the user account from accessing the device for 15 minutes.