HPE Aruba CX
TMA-ARUBA-CX-1.9.2
https-server idle session management
HighLevel 1Manual reviewaruba-cx
Description
https-server sessions are used by both the REST API and Web management interface (WebUI). By default, an https-server session will remain open for 20 minutes while idle. Customers should be setting the idle session timeout to the lowest value that can be tolerated.
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
Run 'show https-server' and confirm 'Session timeout' is set to the organisation's idle limit (default 20 minutes); configure it with 'https-server session-timeout <minutes>'.
How it is fixed
Fix method: Guidance or infrastructure patch
The session-timeout option can be used to set the idle session timeout: https-server session-timeout <minutes>
Properties
- Operating systems
- Any
- Tags
- aruba-cxmanagement
- Reference
- CIS HPE Aruba Networking CX Switch Benchmark v1.0.1 - 1.9.2 https-server idle session management