2.5.1 Ensure CLI session timeout is set to less than or equal to 10 minutes

Information

Set the CLI Session Timeout value for device management to 10 minutes or less to automatically close inactive sessions.

Rationale:

An unattended computer with an open administrative session to the device could allow an unauthorized user access to the firewall's management interface

Solution

Run the following command to Configure the Inactivity Timeout for Command Line.
CLI:

Hostname> set inactivity-timeout 10

GUI:

Navigate to System Management > Session > Command Line Shell > Inactivity Timeout - Set to 10 or less

Default Value:

10

See Also

https://workbench.cisecurity.org/files/2828

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-12, CSCv6|16.4

Plugin: CheckPoint

Control ID: af7100d3ac7ea5853bdd30653e2d8057979c8cd4533af2e59b870626464559b9