TMA-FORTISWITCH-1.7.1.1.4

Ensure Admin idle timeout time is configured

中级别 1自动化fortiswitch

说明

The idle timeout period is the amount of time that an administrator will stay logged in to the GUI without any activity. PASS requires admintimeout between 1 and 5 minutes. Audited against FortiSwitchOS 'show full-configuration' output (standalone FortiSwitch, saved in full); patterns are scoped to the named 'config ... end' block, whose member lines are indented.

检查方式

审计方法: 配置正则匹配

匹配模式: (?m)^config system global\n(?:[ \t]+[^\n]*\n)*?[ \t]+set admintimeout [1-5][ \t]*$

修复方式

修复方法: 操作指南或基础设施补丁

config system global set admintimeout 5 end # CIS guidance: To change the idle timeout in the GUI: 1) Login to FortiGate with Super Admin privileges 2) Go to 'System' > 'Settings'. 3) In the 'Administration Settings' section, set the 'Idle timeout' value to five minutes by typing 5. 4) Click Apply. To change the idle timeout in the CLI: config system global set admintimeout 5 end

属性

操作系统: 任意
标签: fortiswitchauthentication
参考: CIS FortiSwitch Benchmark v1.0.0 - 1.7.1.1.4 Ensure Admin idle timeout time is configured

检查本机

请在您有权审计的机器上运行此命令。扫描为只读操作。

shell

tmaegis scan --target fortiswitch