The HPE Nimble must initiate a session lock after a 15-minute period of inactivity.

Severity	Group ID	Group Title	Version	Rule ID	Date	STIG Version
medium	V-252186	SRG-APP-000003-NDM-000202	HPEN-NM-000010	SV-252186r960741_rule	2024-06-20	2

Description
A session lock is a temporary network device or administrator-initiated action taken when the administrator stops work but does not log out of the network device. Rather than relying on the user to manually lock their management session prior to vacating the vicinity, network devices need to be able to identify when a management session has idled and take action to initiate the session lock. Once invoked, the session lock must remain in place until the administrator reauthenticates. No other system activity aside from reauthentication must unlock the management session. Note that CCI-001133 requires that administrative network sessions be disconnected after 10 minutes of idle time. So this requirement may only apply to local administrative sessions.

Description

A session lock is a temporary network device or administrator-initiated action taken when the administrator stops work but does not log out of the network device. Rather than relying on the user to manually lock their management session prior to vacating the vicinity, network devices need to be able to identify when a management session has idled and take action to initiate the session lock. Once invoked, the session lock must remain in place until the administrator reauthenticates. No other system activity aside from reauthentication must unlock the management session. Note that CCI-001133 requires that administrative network sessions be disconnected after 10 minutes of idle time. So this requirement may only apply to local administrative sessions.

ℹ️ Check
Type "group --info \| grep inactivity" and review the timeout value. If it is greater than 15 minutes, this is a finding.

✔️ Fix
Type "group --edit --inactivity_timeout 15".