Ensure Admin idle timeout time is configured

SedangLevel 1Otomatisfortiswitch

Deskripsi

The idle timeout period is the amount of time that an administrator will stay logged in to the GUI without any activity. PASS requires admintimeout between 1 and 5 minutes. Audited against FortiSwitchOS 'show full-configuration' output (standalone FortiSwitch, saved in full); patterns are scoped to the named 'config ... end' block, whose member lines are indented.

Cara pemeriksaan

Metode audit: Pola konfigurasi

Pola: (?m)^config system global\n(?:[ \t]+[^\n]*\n)*?[ \t]+set admintimeout [1-5][ \t]*$

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

config system global set admintimeout 5 end # CIS guidance: To change the idle timeout in the GUI: 1) Login to FortiSwitch with Super Admin privileges. 2) Go to 'System' > 'Admin' > 'Settings'. 3) In the 'Administration Settings' section, set the 'Idle Timeout' value to five minutes by typing 5. 4) Click 'Update'. To change the idle timeout in the CLI: config system global set admintimeout 5 end

Properti

Sistem operasi: Apa saja
Tag: fortiswitchauthentication
Referensi: CIS FortiSwitch Benchmark v1.0.0 - 1.6.3.2 Ensure Admin idle timeout time is configured

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

shell

tmaegis scan --target fortiswitch