Is it possible to turn off Concurrent Sessions?

We had a pen test and it flagged concurrent sessions.

Weak Session Management - Concurrent Sessions Allowed


IIRC this is controllable at the WAF or by enabling some of the options below in System > Configuration > Web > Session Validation

enter image description here

  • Great to know there's a solution to this - would you mind elaborating on how to implement the solution Phil? – Robbie Averill Nov 24 '15 at 23:23

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.