Amount of idle time required before suspending a session is improperly set.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-1174	4.028	SV-25057r1_rule	ECSC-1	Low

Description
Administrators should use this setting to control when a computer disconnects an inactive SMB session. If client activity resumes, the session is automatically re-established. This protects critical and sensitive network data from exposure to unauthorized personnel with physical access to the computer.

STIG	Date
Win7 Audit	2013-06-10

Details

Check Text ( None )
None

Fix Text (F-5774r1_fix)
Configure the policy value for Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options -> “Microsoft Network Server: Amount of idle time required before suspending a session” to ”15” minutes or less.