ESXI-65-000026 - The ESXi host SSH daemon must set a timeout count on idle sessions.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

This ensures a user login will be terminated as soon as the 'ClientAliveCountMax' is reached.

Solution

From an SSH session connected to the ESXi host, or from the ESXi shell, add or correct the following line in '/etc/ssh/sshd_config':

ClientAliveCountMax 3

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_VMW_vSphere_6-5_Y21M10_STIG.zip

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-12, CAT|III, CCI|CCI-000366, CSCv6|16.4, Rule-ID|SV-207627r388482_rule, STIG-ID|ESXI-65-000026, STIG-Legacy|SV-104085, STIG-Legacy|V-93999, Vuln-ID|V-207627

Plugin: Unix

Control ID: e64218e8f288edb331094c938eded8d9ca6ff3a561650b0774d73ac0f3d2a096