Detections
Analytics
ESXI-80-000211 - The ESXi host Secure Shell (SSH) daemon must set a timeout interval on idle sessions.
Information
Automatically logging out idle users guards against compromises via hijacked administrative sessions.Solution
From an ESXi shell, run the following command:# esxcli system ssh server config set -k clientaliveinterval -v 200
or
From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
$esxcli = Get-EsxCli -v2
$arguments = $esxcli.system.ssh.server.config.set.CreateArgs()
$arguments.keyword = 'clientaliveinterval'
$arguments.value = '200'
$esxcli.system.ssh.server.config.set.Invoke($arguments)
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_VMW_vSphere_8-0_Y25M07_STIG.zip
Item Details
Audit Name: DISA VMware vSphere 8.0 ESXi STIG v2r3 Unix
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|III, CCI|CCI-000366, Rule-ID|SV-258766r959010_rule, STIG-ID|ESXI-80-000211, Vuln-ID|V-258766
Plugin: Unix
Control ID: d6dd3ebf77a4ecbc1a3d4407edab42b0eddd182e48b4a0f2b4535cf800feb709