CCI|CCI-002361

Title

The information system automatically terminates a user session after organization-defined conditions or trigger events requiring session disconnect.

Reference Item Details

Category: 2013

Audit Items

View all Reference Audit Items

NamePluginAudit Name
4.028 - The amount of idle time required before suspending a session must be properly set.WindowsDISA Windows Vista STIG v6r41
5.3.19 Ensure SSH Idle Timeout Interval is configured - ClientAliveCountMaxUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
5.3.19 Ensure SSH Idle Timeout Interval is configured - ClientAliveIntervalUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
5.5.4 Ensure default user shell timeout is configuredUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
5.046 - Terminal Services is not configured to set a time limit for disconnected sessions.WindowsDISA Windows Vista STIG v6r41
5.047 - Terminal Services idle session time limit does not meet the requirement.WindowsDISA Windows Vista STIG v6r41
AIX7-00-002105 - AIX must config the SSH idle timeout interval - ClientAliveCountMaxUnixDISA STIG AIX 7.x v2r6
AIX7-00-002105 - AIX must config the SSH idle timeout interval - ClientAliveIntervalUnixDISA STIG AIX 7.x v2r6
AIX7-00-003003 - AIX must set inactivity time-out on login sessions and terminate all login sessions after 10 minutes of inactivity - TIMEOUTUnixDISA STIG AIX 7.x v2r6
AIX7-00-003003 - AIX must set inactivity time-out on login sessions and terminate all login sessions after 10 minutes of inactivity - TMOUTUnixDISA STIG AIX 7.x v2r6
AS24-U1-000460 - The Apache web server must invalidate session identifiers upon hosted application user logout or other session termination.UnixDISA STIG Apache Server 2.4 Unix Server v2r5
AS24-U1-000460 - The Apache web server must invalidate session identifiers upon hosted application user logout or other session termination.UnixDISA STIG Apache Server 2.4 Unix Server v2r5 Middleware
AS24-U1-000650 - The Apache web server must set an inactive timeout for sessions - reqtimeout_moduleUnixDISA STIG Apache Server 2.4 Unix Server v2r5
AS24-U1-000650 - The Apache web server must set an inactive timeout for sessions - reqtimeout_moduleUnixDISA STIG Apache Server 2.4 Unix Server v2r5 Middleware
AS24-U1-000650 - The Apache web server must set an inactive timeout for sessions.UnixDISA STIG Apache Server 2.4 Unix Server v2r5
AS24-U1-000650 - The Apache web server must set an inactive timeout for sessions.UnixDISA STIG Apache Server 2.4 Unix Server v2r5 Middleware
AS24-U2-000650 - The Apache web server must set an absolute timeout for sessions.UnixDISA STIG Apache Server 2.4 Unix Site v2r2
AS24-U2-000650 - The Apache web server must set an absolute timeout for sessions.UnixDISA STIG Apache Server 2.4 Unix Site v2r2 Middleware
AS24-U2-000660 - The Apache web server must set an inactive timeout for sessions - reqtimeout_moduleUnixDISA STIG Apache Server 2.4 Unix Site v2r2
AS24-U2-000660 - The Apache web server must set an inactive timeout for sessions - reqtimeout_moduleUnixDISA STIG Apache Server 2.4 Unix Site v2r2 Middleware
AS24-U2-000660 - The Apache web server must set an inactive timeout for sessions - RequestReadTimeoutUnixDISA STIG Apache Server 2.4 Unix Site v2r2
AS24-U2-000660 - The Apache web server must set an inactive timeout for sessions - RequestReadTimeoutUnixDISA STIG Apache Server 2.4 Unix Site v2r2 Middleware
AS24-W1-000640 - The Apache web server must set an absolute timeout for sessions.WindowsDISA STIG Apache Server 2.4 Windows Server v2r2
AS24-W1-000650 - The Apache web server must set an inactive timeout for completing the TLS handshake - mod_reqtimeoutWindowsDISA STIG Apache Server 2.4 Windows Server v2r2
AS24-W1-000650 - The Apache web server must set an inactive timeout for completing the TLS handshake - RequestReadTimeoutWindowsDISA STIG Apache Server 2.4 Windows Server v2r2
AS24-W2-000640 - The Apache web server must set an absolute timeout for sessions.WindowsDISA STIG Apache Server 2.4 Windows Site v2r1
AS24-W2-000650 - The Apache web server must set an inactive timeout for completing the TLS handshake - mod_reqtimeoutWindowsDISA STIG Apache Server 2.4 Windows Site v2r1
AS24-W2-000650 - The Apache web server must set an inactive timeout for completing the TLS handshake - RequestReadTimeoutWindowsDISA STIG Apache Server 2.4 Windows Site v2r1
Big Sur - Enforce Auto Logout After 24 Hours of InactivityUnixNIST macOS Big Sur v1.4.0 - 800-53r4 High
Big Sur - Enforce Auto Logout After 24 Hours of InactivityUnixNIST macOS Big Sur v1.4.0 - 800-53r5 High
Big Sur - Enforce Auto Logout After 24 Hours of InactivityUnixNIST macOS Big Sur v1.4.0 - 800-53r5 Moderate
Big Sur - Enforce Auto Logout After 24 Hours of InactivityUnixNIST macOS Big Sur v1.4.0 - All Profiles
Big Sur - Enforce Auto Logout After 24 Hours of InactivityUnixNIST macOS Big Sur v1.4.0 - 800-171
Big Sur - Enforce Auto Logout After 24 Hours of InactivityUnixNIST macOS Big Sur v1.4.0 - CNSSI 1253
Big Sur - Enforce Auto Logout After 24 Hours of InactivityUnixNIST macOS Big Sur v1.4.0 - 800-53r4 Moderate
Catalina - Enforce Auto Logout After 24 Hours of InactivityUnixNIST macOS Catalina v1.5.0 - CNSSI 1253
Catalina - Enforce Auto Logout After 24 Hours of InactivityUnixNIST macOS Catalina v1.5.0 - 800-53r5 High
Catalina - Enforce Auto Logout After 24 Hours of InactivityUnixNIST macOS Catalina v1.5.0 - 800-53r4 Moderate
Catalina - Enforce Auto Logout After 24 Hours of InactivityUnixNIST macOS Catalina v1.5.0 - 800-53r4 High
Catalina - Enforce Auto Logout After 24 Hours of InactivityUnixNIST macOS Catalina v1.5.0 - 800-53r5 Moderate
Catalina - Enforce Auto Logout After 24 Hours of InactivityUnixNIST macOS Catalina v1.5.0 - 800-171
Catalina - Enforce Auto Logout After 24 Hours of InactivityUnixNIST macOS Catalina v1.5.0 - All Profiles
DKER-EE-002490 - The Lifetime Minutes and Renewal Threshold Minutes Login Session Controls must be set to 10 and 0 respectively in Docker Enterprise - lifetime_minutesUnixDISA STIG Docker Enterprise 2.x Linux/Unix UCP v2r1
DKER-EE-002490 - The Lifetime Minutes and Renewal Threshold Minutes Login Session Controls must be set to 10 and 0 respectively in Docker Enterprise - renewal_threshold_minutesUnixDISA STIG Docker Enterprise 2.x Linux/Unix UCP v2r1
DKER-EE-002970 - The Docker Enterprise per user limit login session control must be set per the requirements in the System Security Plan (SSP).UnixDISA STIG Docker Enterprise 2.x Linux/Unix UCP v2r1
ESXI-06-100041 - The VMM must automatically terminate a user session after inactivity timeouts have expired or at shutdown by setting an idle timeout.VMwareDISA STIG VMware vSphere 6.x ESXi v1r5
ESXI-06-100042 - The VMM must automatically terminate a user session after inactivity timeouts have expired or at shutdown by setting an idle timeout on shell services.VMwareDISA STIG VMware vSphere 6.x ESXi v1r5
ESXI-06-100043 - The VMM must automatically terminate a user session after inactivity timeouts have expired or at shutdown.VMwareDISA STIG VMware vSphere 6.x ESXi v1r5
ESXI-67-000041 - The ESXi host must set a timeout to automatically disable idle shell sessions after two minutes.VMwareDISA STIG VMware vSphere 6.7 ESXi v1r2
ESXI-67-000042 - The ESXi host must terminate shell services after 10 minutes.VMwareDISA STIG VMware vSphere 6.7 ESXi v1r2