1.2.7 Set 'exec-timeout' to less than or equal to 10 minutes 'line console 0'

Information

If no input is detected during the interval, the EXEC facility resumes the current connection. If no connections exist, the EXEC facility returns the terminal to the idle state and disconnects the incoming session.

Solution

Configure device timeout (10 minutes or less) to disconnect sessions after a fixed idle time.
hostname(config)#line con 0
hostname(config-line)#exec-timeout <timeout_in_minutes> <timeout_in_seconds>

See Also

https://workbench.cisecurity.org/files/508

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-12

Plugin: Cisco

Control ID: b74016880a5e921e42292343f62e109186002d2986b53315ac3998f33913edec