Detections
Analytics

800-53|AC-2(5)

Title

INACTIVITY LOGOUT

Description

The organization requires that users log out when [Assignment: organization-defined time-period of expected inactivity or description of when to log out].

Reference Item Details

Related: SC-23

Category: ACCESS CONTROL

Parent Title: ACCOUNT MANAGEMENT

Family: ACCESS CONTROL

Baseline Impact: HIGH

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.2.6 Set 'exec-timeout' to less than or equal to 10 minutes for 'line aux 0'CiscoCIS Cisco IOS XE 16.x v2.1.0 L1
1.2.6 Set 'exec-timeout' to less than or equal to 10 minutes for 'line aux 0'CiscoCIS Cisco IOS XE 17.x v2.1.0 L1
1.2.7 Set 'exec-timeout' to less than or equal to 10 minutes 'line console 0'CiscoCIS Cisco IOS XE 16.x v2.1.0 L1
1.2.7 Set 'exec-timeout' to less than or equal to 10 minutes 'line console 0'CiscoCIS Cisco IOS XE 17.x v2.1.0 L1
1.2.8 Set 'exec-timeout' to less than or equal to 10 minutes 'line vty'CiscoCIS Cisco IOS XE 16.x v2.1.0 L1
1.2.8 Set 'exec-timeout' to less than or equal to 10 minutes 'line vty'CiscoCIS Cisco IOS XE 17.x v2.1.0 L1
1.2.9 Set 'transport input none' for 'line aux 0'CiscoCIS Cisco IOS XE 17.x v2.1.0 L1
1.2.9 Set 'transport input none' for 'line aux 0'CiscoCIS Cisco IOS XE 16.x v2.1.0 L1
1.2.11 Set 'exec-timeout' to less than or equal to 10 min on 'ip http'CiscoCIS Cisco IOS XE 17.x v2.1.0 L1
1.2.11 Set 'exec-timeout' to less than or equal to 10 min on 'ip http'CiscoCIS Cisco IOS XE 16.x v2.1.0 L1
1.3.2 Ensure 'Idle session timeout' is set to '3 hours (or less)' for unmanaged devicesmicrosoft_azureCIS Microsoft 365 Foundations E3 L1 v3.1.0
1.4.1 Ensure 'Idle timeout' is less than or equal to 10 minutes for device managementPalo_AltoCIS Palo Alto Firewall 10 v1.2.0 L1
1.4.1 Ensure 'Idle timeout' is less than or equal to 10 minutes for device managementPalo_AltoCIS Palo Alto Firewall 11 v1.1.0 L1
1.4.1 Ensure 'Idle timeout' is less than or equal to 10 minutes for device managementPalo_AltoCIS Palo Alto Firewall 9 v1.1.0 L1
1.4.2 Ensure 'Failed Attempts' and 'Lockout Time' for Authentication Profile are properly configuredPalo_AltoCIS Palo Alto Firewall 10 v1.2.0 L1
1.4.2 Ensure 'Failed Attempts' and 'Lockout Time' for Authentication Profile are properly configuredPalo_AltoCIS Palo Alto Firewall 11 v1.1.0 L1
1.7.4 Ensure GDM screen locks when the user is idleUnixCIS Ubuntu Linux 24.04 LTS v1.0.0 L1 Workstation
1.7.4 Ensure GDM screen locks when the user is idleUnixCIS CentOS Linux 7 v4.0.0 L1 Workstation
1.7.4 Ensure GDM screen locks when the user is idleUnixCIS Debian Linux 12 v1.1.0 L1 Server
1.7.4 Ensure GDM screen locks when the user is idleUnixCIS Ubuntu Linux 22.04 LTS v2.0.0 L1 Server
1.7.4 Ensure GDM screen locks when the user is idleUnixCIS Debian Linux 11 v2.0.0 L1 Server
1.7.4 Ensure GDM screen locks when the user is idleUnixCIS Ubuntu Linux 24.04 LTS v1.0.0 L1 Server
1.7.4 Ensure GDM screen locks when the user is idleUnixCIS Red Hat Enterprise Linux 7 v4.0.0 L1 Workstation
1.7.4 Ensure GDM screen locks when the user is idleUnixCIS CentOS Linux 7 v4.0.0 L1 Server
1.7.4 Ensure GDM screen locks when the user is idleUnixCIS Debian Linux 12 v1.1.0 L1 Workstation
1.7.4 Ensure GDM screen locks when the user is idleUnixCIS Oracle Linux 7 v4.0.0 L1 Server
1.7.4 Ensure GDM screen locks when the user is idleUnixCIS Oracle Linux 7 v4.0.0 L1 Workstation
1.7.4 Ensure GDM screen locks when the user is idleUnixCIS Red Hat Enterprise Linux 7 v4.0.0 L1 Server
1.7.4 Ensure GDM screen locks when the user is idleUnixCIS Debian Linux 11 v2.0.0 L1 Workstation
1.7.4 Ensure GDM screen locks when the user is idleUnixCIS Ubuntu Linux 22.04 LTS v2.0.0 L1 Workstation
1.7.5 Ensure GDM screen locks cannot be overriddenUnixCIS Debian Linux 11 v2.0.0 L1 Server
1.7.5 Ensure GDM screen locks cannot be overriddenUnixCIS Ubuntu Linux 22.04 LTS v2.0.0 L1 Server
1.7.5 Ensure GDM screen locks cannot be overriddenUnixCIS CentOS Linux 7 v4.0.0 L1 Server
1.7.5 Ensure GDM screen locks cannot be overriddenUnixCIS Oracle Linux 7 v4.0.0 L1 Server
1.7.5 Ensure GDM screen locks cannot be overriddenUnixCIS Red Hat Enterprise Linux 7 v4.0.0 L1 Workstation
1.7.5 Ensure GDM screen locks cannot be overriddenUnixCIS Red Hat Enterprise Linux 7 v4.0.0 L1 Server
1.7.5 Ensure GDM screen locks cannot be overriddenUnixCIS CentOS Linux 7 v4.0.0 L1 Workstation
1.7.5 Ensure GDM screen locks cannot be overriddenUnixCIS Debian Linux 11 v2.0.0 L1 Workstation
1.7.5 Ensure GDM screen locks cannot be overriddenUnixCIS Ubuntu Linux 24.04 LTS v1.0.0 L1 Server
1.7.5 Ensure GDM screen locks cannot be overriddenUnixCIS Ubuntu Linux 22.04 LTS v2.0.0 L1 Workstation
1.7.5 Ensure GDM screen locks cannot be overriddenUnixCIS Ubuntu Linux 24.04 LTS v1.0.0 L1 Workstation
1.7.5 Ensure GDM screen locks cannot be overriddenUnixCIS Debian Linux 12 v1.1.0 L1 Server
1.7.5 Ensure GDM screen locks cannot be overriddenUnixCIS Debian Linux 12 v1.1.0 L1 Workstation
1.7.5 Ensure GDM screen locks cannot be overriddenUnixCIS Oracle Linux 7 v4.0.0 L1 Workstation
1.8.1 Ensure 'console session timeout' is less than or equal to '5' minutesCiscoCIS Cisco ASA 9.x Firewall L1 v1.1.0
1.8.2 Ensure 'SSH session timeout' is less than or equal to '5' minutesCiscoCIS Cisco ASA 9.x Firewall L1 v1.1.0
1.8.3 Ensure 'HTTP idle timeout' is less than or equal to '5' minutesCiscoCIS Cisco ASA 9.x Firewall L1 v1.1.0
1.8.4 Ensure GDM screen locks when the user is idleUnixCIS Rocky Linux 8 Server L1 v2.0.0
1.8.4 Ensure GDM screen locks when the user is idleUnixCIS Ubuntu Linux 20.04 LTS Workstation L1 v2.0.1
1.8.4 Ensure GDM screen locks when the user is idleUnixCIS Ubuntu Linux 18.04 LTS v2.2.0 L1 Workstation