TMA-OPNSENSE-2.1
Ensure Sessions Timeout is set to less than or equal to 10 Minutes
SedangLevel 1Otomatisopnsense
Deskripsi
The session inactivity timeout setting represents the amount of time a user can be inactive before the user's session times out and closes. It only affects user browser sessions. Indefinite or even long session timeout window increase the risk of attackers abusing abandoned sessions
Cara pemeriksaan
Metode audit: Pola konfigurasi
- Pola
<session_timeout>(?:[1-9]|10)</session_timeout>
Cara perbaikan
Metode perbaikan: Panduan atau patch infrastruktur
In GUI: - Navigate to System > Settings > Administration - Scroll to the 'Session Timeout' - Set 10 in the 'Session Timeout' field - Click Save
Properti
- Sistem operasi
- Apa saja
- Tag
- opnsense
- Referensi
- CIS OPNsense Benchmark v1.0.0 - 2.1 Ensure Sessions Timeout is set to less than or equal to 10 Minutes
Periksa host ini
Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.
shell
tmaegis scan --target opnsense