AC-10: Concurrent Session Control

Generated

2019-04-12 13:01:48.067729

Status

Failed

Statements

The information system limits the number of concurrent sessions for each [Assignment: organization-defined account and/or account type] to [Assignment: organization-defined number].

STIG

STIG # Description Result
V-72863 PostgreSQL must limit the number of concurrent sessions to an organization-defined number per user for all accounts and/or account types. failed

Additional Guidance

Organizations may define the maximum number of concurrent sessions for information system accounts globally, by account type (e.g., privileged user, non-privileged user, domain, specific application), by account, or a combination. For example, organizations may limit the number of concurrent sessions for system administrators or individuals working in particularly sensitive domains or mission-critical applications. This control addresses concurrent sessions for information system accounts and does not address concurrent sessions by single users via multiple system accounts.