The network element must timeout management connections for administrative access after 10 minutes or less of inactivity.

From Infrastructure Router Security Technical Implementation Guide Cisco

Part of Management connection does not timeout.

SV-15453r2_rule The network element must timeout management connections for administrative access after 10 minutes or less of inactivity.

Vulnerability discussion

Setting the timeout of the session to 10 minutes or less increases the level of protection afforded critical network components.

Check content

Review the management connection for administrative access and verify the network element is configured to time-out the connection after 10 minutes or less of inactivity. The default for the VTY line is 10 minutes and may not appear in the display of the configuration. The VTY line should contain the following command: exec-timeout 10

Fix text

Configure the network devices to ensure the timeout for unattended administrative access connections is no longer than 10 minutes.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.