Set ‘exec-timeout’ less than or equal to 10 minutes ‘line tty’
Details If no input is detected during the interval, the EXEC facility resumes the current connection. If no connections exist,...
- Home
- Security Hardening
- CIS Cisco IOS 16 L1 V1.1.1
CIS Cisco IOS 16 L1 V1.1.1
Set ‘exec-timeout’ to less than or equal to 10 min on ‘ip http’
Details If no input is detected during the interval, the EXEC facility resumes the current connection. If no connections exist,...Set ‘exec-timeout’ to less than or equal to 10 minutes for ‘line aux 0’
Details If no input is detected during the interval, the EXEC facility resumes the current connection. If no connections exist,...Set ‘exec-timeout’ to less than or equal to 10 minutes ‘line console 0’
Details If no input is detected during the interval, the EXEC facility resumes the current connection. If no connections exist,...Set ‘exec-timeout’ to less than or equal to 10 minutes ‘line vty’
Details If no input is detected during the interval, the EXEC facility resumes the current connection. If no connections exist,...Set ‘http Secure-server’ limit
Details Device management includes the ability to control the number of administrators and management sessions that manage a device. Limiting...Set ‘login authentication for ‘ip http’ – http authentication
Details If account management functions are not automatically enforced, an attacker could gain privileged access to a vital element of...Set ‘login authentication for ‘ip http’ – http secure-server
Details If account management functions are not automatically enforced, an attacker could gain privileged access to a vital element of...Set ‘login authentication for ‘line con 0’
Details Authenticates users who access the router or switch using the serial console port. Rationale: Using AAA authentication for interactive...Set ‘login authentication for ‘line tty’
Details Authenticates users who access the router or switch using the TTY port. Rationale: Using AAA authentication for interactive management...