1.4.1 Ensure 'Idle timeout' is less than or equal to 10 minutes for device management

Information

Set the Idle Timeout value for device management to 10 minutes or less to automatically close inactive sessions.

Rationale:

An unattended computer with an open administrative session to the device could allow an unauthorized user access to the firewall's management interface.

Solution

Navigate to Device > Setup > Management > Authentication Settings.
Set Idle Timeout to less than or equal to 10.

Default Value:

Not configured

See Also

https://workbench.cisecurity.org/benchmarks/17915