Details
Set the CLI Session Timeout value for device management to 10 minutes or less to automatically close inactive sessions.
Rationale:
An unattended computer with an open administrative session to the device could allow an unauthorized user access to the firewall’s management interface
Solution
Run the following command to Configure the Inactivity Timeout for Command Line.
CLI:
Hostname> set inactivity-timeout 10
GUI:
Navigate to System Management > Session > Command Line Shell > Inactivity Timeout – Set to 10 or less
Default Value:
10
Supportive Information
The following resource is also helpful.
This security hardening control applies to the following category of controls within NIST 800-53: Access Control.This control applies to the following type of system CheckPoint.