Ensure Sessions Timeout is set to less than or equal to 10 Minutes

SrednjaNivo 1Automatskapfsense

Opis

The session inactivity timeout setting represents the amount of time a user can be inactive before the user's session times out and closes. It only affects user browser sessions. PASS requires <session_timeout> between 1 and 10 minutes (an empty value means the 240-minute default). Audited against the pfSense config.xml (Diagnostics > Backup & Restore > Download configuration, or /cf/conf/config.xml).

Kako se proverava

Metod provere: Obrazac konfiguracije

Obrazac: <session_timeout>(?:[1-9]|10)</session_timeout>

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

GUI: System > User Manager > Settings > Session timeout = 10, Save. # CIS guidance: In GUI: - Navigate to System > User Manager - CLIck the Setting at the top. - set 10 in the 'Session Timeout' field. - CLIck Save

Svojstva

Operativni sistemi: Bilo koji
Oznake: pfsensemanagement
Referenca: CIS pfSense Firewall Benchmark v1.1.0 - 2.1 Ensure Sessions Timeout is set to less than or equal to 10 Minutes

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target pfsense