Detections
Analytics

CSCv6|16.4

Title

Regularly monitor the use of all accounts, automatically logging off users after a standard period of inactivity.

Description

Regularly monitor the use of all accounts, automatically logging off users after a standard period of inactivity.

Reference Item Details

Category: Account Monitoring and Control

Family: Application

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.1.1.2.1.21 Set 'Microsoft network server: Amount of idle time required before suspending session' to '15'WindowsCIS Windows 2003 DC v3.1.0
1.1.1.2.1.21 Set 'Microsoft network server: Amount of idle time required before suspending session' to '15'WindowsCIS Windows 2003 MS v3.1.0
1.1.1.2.1.59 Set 'Microsoft network server: Disconnect clients when logon hours expire' to 'Enabled'WindowsCIS Windows 2003 MS v3.1.0
1.1.1.2.1.59 Set 'Microsoft network server: Disconnect clients when logon hours expire' to 'Enabled'WindowsCIS Windows 2003 DC v3.1.0
1.1.2.2 Set 'Audit Policy: Account Management: Other Account Management Events' to 'Success and Failure'WindowsCIS Windows 8 L1 v1.0.0
1.1.2.10 Set 'Audit Policy: Account Management: User Account Management' to 'Success and Failure'WindowsCIS Windows 8 L1 v1.0.0
1.1.2.48 Set 'Audit Policy: Account Logon: Credential Validation' to 'Success and Failure'WindowsCIS Windows 8 L1 v1.0.0
1.1.3.8.1 Set 'Microsoft network server: Disconnect clients when logon hours expire' to 'Enabled'WindowsCIS Windows 8 L1 v1.0.0
1.1.3.8.2 Set 'Microsoft network server: Amount of idle time required before suspending session' to '15 or fewer minute(s)'WindowsCIS Windows 8 L1 v1.0.0
1.1.3.11.17 Configure 'Network security: Force logoff when logon hours expire'WindowsCIS Windows 8 L1 v1.0.0
1.2.4.5.5 Set 'Do not allow passwords to be saved' to 'Enabled'WindowsCIS Windows 8 L1 v1.0.0
1.2.4.6.4 Set 'Disallow WinRM from storing RunAs credentials' to 'Enabled'WindowsCIS Windows 8 L1 v1.0.0
1.2.6 Set 'exec-timeout' to less than or equal to 10 minutes for 'line aux 0'CiscoCIS Cisco IOS 16 L1 v1.1.0
1.2.6 Set 'exec-timeout' to less than or equal to 10 minutes for 'line aux 0'CiscoCIS Cisco IOS 15 L1 v4.0.1
1.2.6 Set 'exec-timeout' to less than or equal to 10 minutes for 'line aux 0'CiscoCIS Cisco IOS 15 L1 v4.1.0
1.2.6 Set 'exec-timeout' to less than or equal to 10 minutes for 'line aux 0'CiscoCIS Cisco IOS 16 L1 v1.1.1
1.2.7 Set 'exec-timeout' to less than or equal to 10 minutes 'line console 0'CiscoCIS Cisco IOS 15 L1 v4.0.1
1.2.7 Set 'exec-timeout' to less than or equal to 10 minutes 'line console 0'CiscoCIS Cisco IOS 16 L1 v1.1.1
1.2.7 Set 'exec-timeout' to less than or equal to 10 minutes 'line console 0'CiscoCIS Cisco IOS 15 L1 v4.1.0
1.2.7 Set 'exec-timeout' to less than or equal to 10 minutes 'line console 0'CiscoCIS Cisco IOS 16 L1 v1.1.0
1.2.8 Set 'exec-timeout' less than or equal to 10 minutes 'line tty'CiscoCIS Cisco IOS 16 L1 v1.1.0
1.2.8 Set 'exec-timeout' less than or equal to 10 minutes 'line tty'CiscoCIS Cisco IOS 15 L1 v4.0.1
1.2.8 Set 'exec-timeout' less than or equal to 10 minutes 'line tty'CiscoCIS Cisco IOS 15 L1 v4.1.0
1.2.8 Set 'exec-timeout' less than or equal to 10 minutes 'line tty'CiscoCIS Cisco IOS 16 L1 v1.1.1
1.2.9 Set 'exec-timeout' to less than or equal to 10 minutes 'line vty'CiscoCIS Cisco IOS 15 L1 v4.0.1
1.2.9 Set 'exec-timeout' to less than or equal to 10 minutes 'line vty'CiscoCIS Cisco IOS 16 L1 v1.1.0
1.2.9 Set 'exec-timeout' to less than or equal to 10 minutes 'line vty'CiscoCIS Cisco IOS 16 L1 v1.1.1
1.2.9 Set 'exec-timeout' to less than or equal to 10 minutes 'line vty'CiscoCIS Cisco IOS 15 L1 v4.1.0
1.2.10 Set 'exec-timeout' to less than or equal to 10 minutes 'line vty'CiscoCIS Cisco IOS 15 L1 v4.1.0
1.2.10 Set 'transport input none' for 'line aux 0'CiscoCIS Cisco IOS 15 L1 v4.0.1
1.2.10 Set 'transport input none' for 'line aux 0'CiscoCIS Cisco IOS 16 L1 v1.1.1
1.2.10 Set 'transport input none' for 'line aux 0'CiscoCIS Cisco IOS 16 L1 v1.1.0
1.2.11 Set 'transport input none' for 'line aux 0'CiscoCIS Cisco IOS 15 L1 v4.1.0
1.4 Ensure 'Automatically Lock' is set to 'Immediately'MDMMobileIron - CIS Google Android v1.3.0 L1
1.4 Ensure 'Automatically Lock' is set to 'Immediately'MDMAirWatch - CIS Google Android v1.3.0 L1
1.4 Ensure 'Automatically Lock' is set to 'Immediately'MDMAirWatch - CIS Google Android v1.2.0 L1
1.4 Ensure 'Automatically Lock' is set to 'Immediately'MDMMobileIron - CIS Google Android v1.2.0 L1
1.4.1 Ensure 'Idle timeout' is less than or equal to 10 minutes for device managementPalo_AltoCIS Palo Alto Firewall 8 Benchmark L1 v1.0.0
1.4.1 Ensure 'Idle timeout' is less than or equal to 10 minutes for device managementPalo_AltoCIS Palo Alto Firewall 6 Benchmark L1 v1.0.0
1.4.1 Ensure 'Idle timeout' is less than or equal to 10 minutes for device managementPalo_AltoCIS Palo Alto Firewall 7 Benchmark L1 v1.0.0
1.4.1 Ensure 'Idle timeout' is less than or equal to 10 minutes for device managementPalo_AltoCIS Palo Alto Firewall 9 Benchmark v1.0.0 L1
1.4.14.8 Secure Remote Login 'ClientAliveCountMax'UnixCIS Apple OSX 10.6 Snow Leopard L2 v1.0.0
1.4.14.8 Secure Remote Login 'ClientAliveInterval'UnixCIS Apple OSX 10.6 Snow Leopard L2 v1.0.0
1.4.14.8 Secure Remote Login 'LoginGraceTime'UnixCIS Apple OSX 10.6 Snow Leopard L2 v1.0.0
1.8.1 Ensure 'console session timeout' is less than or equal to '5' minutesCiscoCIS Cisco Firewall ASA 9 L1 v4.0.0
1.8.1 Ensure 'console session timeout' is less than or equal to '5' minutesCiscoCIS Cisco Firewall ASA 9 L1 v4.1.0
1.21 Ensure 'Screen timeout' is set to '1 minute or less'MDMMobileIron - CIS Google Android v1.3.0 L1
1.21 Ensure 'Screen timeout' is set to '1 minute or less'MDMAirWatch - CIS Google Android v1.3.0 L1
1.21 Ensure 'Sleep' is set to 1 minute or lessMDMAirWatch - CIS Google Android v1.2.0 L1
1.21 Ensure 'Sleep' is set to 1 minute or lessMDMMobileIron - CIS Google Android v1.2.0 L1