Ensure Sessions Timeout is set to less than or equal to 10 Minutes

SedangLevel 1Otomatispfsense

Deskripsi

The session inactivity timeout setting represents the amount of time a user can be inactive before the user's session times out and closes. It only affects user browser sessions. PASS requires <session_timeout> between 1 and 10 minutes (an empty value means the 240-minute default). Audited against the pfSense config.xml (Diagnostics > Backup & Restore > Download configuration, or /cf/conf/config.xml).

Cara pemeriksaan

Metode audit: Pola konfigurasi

Pola: <session_timeout>(?:[1-9]|10)</session_timeout>

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

GUI: System > User Manager > Settings > Session timeout = 10, Save. # CIS guidance: In GUI: - Navigate to System > User Manager - CLIck the Setting at the top. - set 10 in the 'Session Timeout' field. - CLIck Save

Properti

Sistem operasi: Apa saja
Tag: pfsensemanagement
Referensi: CIS pfSense Firewall Benchmark v1.1.0 - 2.1 Ensure Sessions Timeout is set to less than or equal to 10 Minutes

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

shell

tmaegis scan --target pfsense