Ensure Sessions Timeout is set to less than or equal to 10 Minutes

MediaNivel 1Automatizadapfsense

Descripción

The session inactivity timeout setting represents the amount of time a user can be inactive before the user's session times out and closes. It only affects user browser sessions. PASS requires <session_timeout> between 1 and 10 minutes (an empty value means the 240-minute default). Audited against the pfSense config.xml (Diagnostics > Backup & Restore > Download configuration, or /cf/conf/config.xml).

Cómo se verifica

Método de auditoría: Patrón de configuración

Patrón: <session_timeout>(?:[1-9]|10)</session_timeout>

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

GUI: System > User Manager > Settings > Session timeout = 10, Save. # CIS guidance: In GUI: - Navigate to System > User Manager - CLIck the Setting at the top. - set 10 in the 'Session Timeout' field. - CLIck Save

Propiedades

Sistemas operativos: Cualquiera
Etiquetas: pfsensemanagement
Referencia: CIS pfSense Firewall Benchmark v1.1.0 - 2.1 Ensure Sessions Timeout is set to less than or equal to 10 Minutes

Verificar este host

Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.

shell

tmaegis scan --target pfsense