TMAegisBeta
Weitere Regeln für fortiswitch

Fortinet FortiSwitch

TMA-FORTISWITCH-1.6.3.2

Ensure Admin idle timeout time is configured

MittelStufe 1Automatisiertfortiswitch

Beschreibung

The idle timeout period is the amount of time that an administrator will stay logged in to the GUI without any activity. PASS requires admintimeout between 1 and 5 minutes. Audited against FortiSwitchOS 'show full-configuration' output (standalone FortiSwitch, saved in full); patterns are scoped to the named 'config ... end' block, whose member lines are indented.

So wird geprüft

Prüfmethode: Konfigurationsmuster

Muster
(?m)^config system global\n(?:[ \t]+[^\n]*\n)*?[ \t]+set admintimeout [1-5][ \t]*$

So wird behoben

Behebungsmethode: Anleitung oder Infrastruktur-Patch

config system global set admintimeout 5 end # CIS guidance: To change the idle timeout in the GUI: 1) Login to FortiSwitch with Super Admin privileges. 2) Go to 'System' > 'Admin' > 'Settings'. 3) In the 'Administration Settings' section, set the 'Idle Timeout' value to five minutes by typing 5. 4) Click 'Update'. To change the idle timeout in the CLI: config system global set admintimeout 5 end

Eigenschaften

Betriebssysteme
Beliebig
Tags
fortiswitchauthentication
Referenz
CIS FortiSwitch Benchmark v1.0.0 - 1.6.3.2 Ensure Admin idle timeout time is configured

Diesen Host prüfen

Führen Sie dies auf einem Rechner aus, den Sie prüfen dürfen. Der Scan ist schreibgeschützt.

shell
tmaegis scan --target fortiswitch