Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-3014 | NET1639 | SV-32758r2_rule | ECSC-1 | Medium |
Description |
---|
Setting the timeout of the session to ten minutes or less increases the level of protection afforded critical network components. |
STIG | Date |
---|---|
Firewall Security Technical Implementation Guide - Cisco | 2013-10-08 |
Check Text ( C-33384r2_chk ) |
---|
Review the management connection for administrative access and verify that the network element is configured to time-out the connection after 10 minutes or less of inactivity as shown in the following example: ssh timeout 10 |
Fix Text (F-3039r4_fix) |
---|
Configure the network element to ensure the timeout for unattended administrative access connections is no longer than 10 minutes. |