2.1.1.1.4 Set 'seconds' for 'ip ssh timeout'

Information

The time interval that the router waits for the SSH client to respond before disconnecting an uncompleted login attempt.

Rationale:

This reduces the risk of an administrator leaving an authenticated session logged in for an extended period of time.

Impact:

Organizations should implement a security policy requiring minimum timeout settings for all network administrators and enforce the policy through the 'ip ssh timeout' command.

Solution

Configure the SSH timeout

hostname(config)#ip ssh time-out [<em>60</em>]

Default Value:

SSH in not enabled by default.

See Also

https://workbench.cisecurity.org/files/3829

Item Details

Category: ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|AC-18, 800-53|SC-23, CSCv7|4.5

Plugin: Cisco

Control ID: e2227ae64b4b24fc04deae85f00d42a97e55d066ab44926b78f910a40e57a949