Details

Session timeout should be Enabled.

Solution

Configuration > System > Administration > System Configurations > System, Time zone, Allowed URLs and Message of the day

Update the value for Session Timeout Unit to minutes.

NOTE### add message as to why minutes vs. hours

Supportive Information

The following resource is also helpful.

• https://developer-docs.citrix.com/projects/citrix-adm-nitro-api-reference/en/latest/

This security hardening control applies to the following category of controls within NIST 800-53: Access Control.This control applies to the following type of system Citrix_Application_Delivery.

References

• 800-53|AC-12

Source

• Tenable.com/audits