Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The network element must timeout management connections for administrative access after 10 minutes or less of inactivity.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-3014 | NET1639 | SV-15453r2_rule | ECSC-1 | Medium |
| Description |
|---|
| Setting the timeout of the session to 10 minutes or less increases the level of protection afforded critical network components. |
| STIG | Date |
|---|---|
| Perimeter Router Security Technical Implementation Guide Cisco | 2015-04-06 |
Details
| Check Text ( C-12918r4_chk ) |
|---|
| Review the management connection for administrative access and verify the network element is configured to time-out the connection after 10 minutes or less of inactivity. The default for the VTY line is 10 minutes and may not appear in the display of the configuration. The VTY line should contain the following command: exec-timeout 10 |
| Fix Text (F-3039r5_fix) |
|---|
| Configure the network devices to ensure the timeout for unattended administrative access connections is no longer than 10 minutes. |