[Forgot Password]
Login  Register Subscribe

24128

 
 

131573

 
 

110204

 
 

909

 
 

85984

 
 

136

Paid content will be excluded from the download.


Download | Alert*
OVAL

Microsoft network server: Amount of idle time required before suspending session

ID: oval:org.secpod.oval:def:40220Date: (C)2017-04-25   (M)2018-07-10
Class: COMPLIANCEFamily: windows




This policy setting allows you to specify the amount of continuous idle time that must pass in an SMB session before the session is suspended because of inactivity. Administrators can use this policy setting to control when a computer suspends an inactive SMB session. If client activity resumes, the session is automatically reestablished. A value of 0 will disconnect an idle session as quickly as possible. The maximum value is 99999, which is 208 days; in effect, this value disables the setting. Vulnerability: Each SMB session consumes server resources, and numerous null sessions will slow the server or possibly cause it to fail. An attacker could repeatedly establish SMB sessions until the server's SMB services become slow or unresponsive. Counter Measure: Configure the Microsoft network server: Amount of idle time required before disconnecting session setting to 15 minutes. Potential Impact: There will be little impact because SMB sessions will be re-established automatically if the client resumes activity. Fix: (1) GPO: Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\Microsoft network server: Amount of idle time required before suspending session (2) REG: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters!autodisconnect

Platform:
Microsoft Windows Server 2016
Reference:
CCE-46027-9
CPE    1
cpe:/o:microsoft:windows_server_2016:::x64
CCE    1
CCE-46027-9
XCCDF    4
xccdf_org.secpod_benchmark_general_Windows_Server_2016
xccdf_org.secpod_benchmark_NIST_800_53_r4_Windows_Server_2016
xccdf_org.secpod_benchmark_NIST_800_171_R1_Windows_Server_2016
xccdf_org.secpod_benchmark_PCI_3_2_Windows_Server_2016
...

© SecPod Technologies