Ensure Sessions Timeout is set to less than or equal to 10 Minutes

MittelStufe 1Automatisiertpfsense

Beschreibung

The session inactivity timeout setting represents the amount of time a user can be inactive before the user's session times out and closes. It only affects user browser sessions. PASS requires <session_timeout> between 1 and 10 minutes (an empty value means the 240-minute default). Audited against the pfSense config.xml (Diagnostics > Backup & Restore > Download configuration, or /cf/conf/config.xml).

So wird geprüft

Prüfmethode: Konfigurationsmuster

Muster: <session_timeout>(?:[1-9]|10)</session_timeout>

So wird behoben

Behebungsmethode: Anleitung oder Infrastruktur-Patch

GUI: System > User Manager > Settings > Session timeout = 10, Save. # CIS guidance: In GUI: - Navigate to System > User Manager - CLIck the Setting at the top. - set 10 in the 'Session Timeout' field. - CLIck Save

Eigenschaften

Betriebssysteme: Beliebig
Tags: pfsensemanagement
Referenz: CIS pfSense Firewall Benchmark v1.1.0 - 2.1 Ensure Sessions Timeout is set to less than or equal to 10 Minutes

Diesen Host prüfen

Führen Sie dies auf einem Rechner aus, den Sie prüfen dürfen. Der Scan ist schreibgeschützt.

shell

tmaegis scan --target pfsense