Ensure Sessions Timeout is set to less than or equal to 10 Minutes

OrtaDüzey 1Otomatikpfsense

Açıklama

The session inactivity timeout setting represents the amount of time a user can be inactive before the user's session times out and closes. It only affects user browser sessions. PASS requires <session_timeout> between 1 and 10 minutes (an empty value means the 240-minute default). Audited against the pfSense config.xml (Diagnostics > Backup & Restore > Download configuration, or /cf/conf/config.xml).

Nasıl denetlenir

Denetim yöntemi: Yapılandırma deseni

Desen: <session_timeout>(?:[1-9]|10)</session_timeout>

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

GUI: System > User Manager > Settings > Session timeout = 10, Save. # CIS guidance: In GUI: - Navigate to System > User Manager - CLIck the Setting at the top. - set 10 in the 'Session Timeout' field. - CLIck Save

Özellikler

İşletim sistemleri: Herhangi biri
Etiketler: pfsensemanagement
Referans: CIS pfSense Firewall Benchmark v1.1.0 - 2.1 Ensure Sessions Timeout is set to less than or equal to 10 Minutes

Bu ana makineyi denetle

Bunu denetleme izniniz olan bir makinede çalıştırın. Tarama salt okunurdur.

shell

tmaegis scan --target pfsense