topic Re: IDM/CLI auto logout in Network Security https://community.cisco.com/t5/network-security/idm-cli-auto-logout/m-p/960101#M80012 <HTML><HEAD></HEAD><BODY><P>The ftp-timeout option only applies to a sensor connecting to an ftp server for an upgrade.</P><P></P><P>There is no timeout option to shutdown a cli session (through telnet, ssh, or console) that has been sitting idle.</P><P></P></BODY></HTML> Wed, 21 May 2008 19:59:17 GMT marcabal 2008-05-21T19:59:17Z IDM/CLI auto logout https://community.cisco.com/t5/network-security/idm-cli-auto-logout/m-p/960099#M80010 <P>I work on a system that requires management interfaces to logout a user if inactive for a period of time (10 minutes).</P><P>Is there any way to configure this for the 4215/4240 IDM &amp;/or CLI interfaces?</P><P></P><P></P> Sun, 10 Mar 2019 11:06:47 GMT https://community.cisco.com/t5/network-security/idm-cli-auto-logout/m-p/960099#M80010 joedansereau 2019-03-10T11:06:47Z Re: IDM/CLI auto logout https://community.cisco.com/t5/network-security/idm-cli-auto-logout/m-p/960100#M80011 <HTML><HEAD></HEAD><BODY><P>Use the ftp-timeout command in the service host submode to change the number of seconds that the FTP client waits before timing out when the sensor is communicating with an FTP server. The default is 300 seconds. </P><P></P><P>refer the following url for more info:</P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/docs/security/ips/6.0/configuration/guide/cli/cliTasks.html#wpmkr1088220" target="_blank">http://www.cisco.com/en/US/docs/security/ips/6.0/configuration/guide/cli/cliTasks.html#wpmkr1088220</A></P></BODY></HTML> Wed, 21 May 2008 18:55:50 GMT https://community.cisco.com/t5/network-security/idm-cli-auto-logout/m-p/960100#M80011 smahbub 2008-05-21T18:55:50Z Re: IDM/CLI auto logout https://community.cisco.com/t5/network-security/idm-cli-auto-logout/m-p/960101#M80012 <HTML><HEAD></HEAD><BODY><P>The ftp-timeout option only applies to a sensor connecting to an ftp server for an upgrade.</P><P></P><P>There is no timeout option to shutdown a cli session (through telnet, ssh, or console) that has been sitting idle.</P><P></P></BODY></HTML> Wed, 21 May 2008 19:59:17 GMT https://community.cisco.com/t5/network-security/idm-cli-auto-logout/m-p/960101#M80012 marcabal 2008-05-21T19:59:17Z Re: IDM/CLI auto logout https://community.cisco.com/t5/network-security/idm-cli-auto-logout/m-p/960102#M80013 <HTML><HEAD></HEAD><BODY><P>Thanks. This would be a nice feature to have for all access methods (telnet, ftp, ssh, IDM, IME, etc...)</P></BODY></HTML> Mon, 02 Jun 2008 16:23:35 GMT https://community.cisco.com/t5/network-security/idm-cli-auto-logout/m-p/960102#M80013 joedansereau 2008-06-02T16:23:35Z Re: IDM/CLI auto logout https://community.cisco.com/t5/network-security/idm-cli-auto-logout/m-p/960103#M80014 <HTML><HEAD></HEAD><BODY><P>If its really important, and there is firewall between the management subnet and the IPS sensor, you could use the firewall to disconnect the management traffic destined to the IPS after 'x' amount of time.</P><P></P><P>Regards</P><P></P><P>Farrukh</P></BODY></HTML> Mon, 02 Jun 2008 18:04:05 GMT https://community.cisco.com/t5/network-security/idm-cli-auto-logout/m-p/960103#M80014 Farrukh Haroon 2008-06-02T18:04:05Z Re: IDM/CLI auto logout https://community.cisco.com/t5/network-security/idm-cli-auto-logout/m-p/960104#M80015 <HTML><HEAD></HEAD><BODY><P>It would be nice, and is often required in any shop that has any defined security policy to have:</P><P>ssh/https session idle time out</P><P>RADIUS/TACACS AAA authentication</P><P>Account lockout after X bad passwords</P><P></P><P></P></BODY></HTML> Mon, 02 Jun 2008 18:14:21 GMT https://community.cisco.com/t5/network-security/idm-cli-auto-logout/m-p/960104#M80015 rhermes 2008-06-02T18:14:21Z Re: IDM/CLI auto logout https://community.cisco.com/t5/network-security/idm-cli-auto-logout/m-p/960105#M80016 <HTML><HEAD></HEAD><BODY><P>I totally agree, all these features are a must to apply a consistent security policy across all network elements (specially considering the IDS/IPS is a security device)</P><P></P><P>Regards</P><P></P><P>Farrukh</P></BODY></HTML> Mon, 02 Jun 2008 18:35:22 GMT https://community.cisco.com/t5/network-security/idm-cli-auto-logout/m-p/960105#M80016 Farrukh Haroon 2008-06-02T18:35:22Z Re: IDM/CLI auto logout https://community.cisco.com/t5/network-security/idm-cli-auto-logout/m-p/960106#M80017 <HTML><HEAD></HEAD><BODY><P>A bug was entered against IDM in 5.0 and never acted upon for this very thing. </P><P></P><P>Thanks</P><P>Bob</P></BODY></HTML> Mon, 02 Jun 2008 18:48:24 GMT https://community.cisco.com/t5/network-security/idm-cli-auto-logout/m-p/960106#M80017 rhoud 2008-06-02T18:48:24Z