Detections
Analytics
ESXI-65-000027 - The ESXi hostSSH daemon must set a timeout interval on idle sessions.
Information
Causing idle users to be automatically logged out guards against compromises one system leading trivially to compromises on another.Solution
From an SSH session connected to the ESXi host, or from the ESXi shell, add or correct the following line in '/etc/ssh/sshd_config':ClientAliveInterval 200
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_VMW_vSphere_6-5_Y21M07_STIG.zip
Item Details
Audit Name: DISA STIG VMware vSphere ESXi OS 6.5 v2r2
Category: ACCESS CONTROL
References: 800-53|AC-12, CAT|III, CCI|CCI-000366, CSCv6|16.4, Rule-ID|SV-207628r388482_rule, STIG-ID|ESXI-65-000027, STIG-Legacy|SV-104087, STIG-Legacy|V-94001, Vuln-ID|V-207628
Plugin: Unix
Control ID: 46a95a4aee7387b8df878c084c112c0ea1374ef3e6cc05bd9743e1cb0c593acc