Other Articles

Servers – Verify SSH MaxSessions Configuration

Support > Fixing Checks > Server

06 March, 2026

This check ensures that SSH MaxSessions is configured to limit the number of concurrent sessions per connection.

Improper configuration can allow excessive concurrent sessions, which may lead to denial-of-service conditions or resource exhaustion. Limiting MaxSessions helps maintain system availability and secure SSH access.

Check Details

  • Resource: Server
  • Check: Ensure SSH MaxSessions is set to 4 or less
  • Risk: High number of concurrent sessions can lead to resource exhaustion and potential denial-of-service attacks.

Remediation Steps

  1. Open a terminal session with root or sudo privileges.

  2. Verify current MaxSessions configuration:

    sshd -T | grep -i maxsessions
  3. Ensure the output shows MaxSessions set to 4 or less.

  4. Edit SSH configuration file:

    sudo nano /etc/ssh/sshd_config

  5. Add or modify the MaxSessions parameter:

    MaxSessions 4
  6. Save the file and exit.

  7. Restart SSH service:

    sudo systemctl restart sshd
  8. Re-run the audit command to confirm the configuration.
  9. Regularly review SSH settings to ensure compliance with security policies.