The HYCU server and Web UI must terminate all network connections associated with a device management session at the end of the session, or the session must be terminated after 15 minutes of inactivity except to fulfill documented and validated mission requirements.

An XCCDF Rule

Description

<VulnDiscussion>Terminating an idle session within a short time period reduces the window of opportunity for unauthorized personnel to take control of a management session enabled on the console or console port that has been left unattended. In addition, quickly terminating an idle session will also free up resources committed by the managed network element.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>

ID: SV-246857r768243_rule
Severity: High
References: CCI-001133
Updated: about 1 year ago

Configure the operating system to enforce timeout settings.

Add the following line to "/home/hycu/.bashrc" (or modify the line to have the required value):
TMOUT=900

Add the following line to "/etc/ssh/sshd_config" (or modify the line to have the required value):ClientAliveInterval 900

Edit the "/opt/grizzly/config.properties" file by running:
sudo vi /opt/grizzly/config.properties

Add the following line or modify the line to have the required value:
api.session.expiration.minutes=15

Save the file by typing:
:wq!

The HYCU server and Web UI must terminate all network connections associated with a device management session at the end of the session, or the session must be terminated after 15 minutes of inactivity except to fulfill documented and validated mission requirements.

Description

Remediation - Manual Procedure