Details

Timeouts should be setup for any idle CLI and/or management connections. Typically a good rule of thumb is determine the length your support staff will typically use a session and how frequent they might have to authenticate during a typical work day.

Solution

Run the following command on the device to disable ftp: configure system login-control idle-timeout x (where x is your idle time limit)

Supportive Information

The following resource is also helpful.

• https://infoproducts.alcatel-lucent.com/aces/cgi-bin/dbaccessfilename.cgi/9305050101_V1_SR-OS Security Best Practices v2.0.pdf

This security hardening control applies to the following category of controls within NIST 800-53: System and Communications Protection.This control applies to the following type of system Alcatel.

References

• 800-53|SC-10

Source

• Tenable.com/audits