ASA 5545 authentication timeout

[dassey111]

I have a firewall DOD DISA STIG I need to apply. I have to set authentication timeout to 60 seconds.

Is there a way to set authentication timeouts? So if a user tries to SSH into the device and let it sit at the login screen for 60 seconds, reset/drop/close the session.

I have been looking for an AAA command to implement this, but no luck yet.

ASA 5545

ASA Version 9.4(3)

[cofee]

Try this:

ssh timeout 60 (this is in minutes, so you will be setting it for 1 minute and I am not sure but that might already be the default value)

This will be applied to the global config and set the timeout for any ssh connection on the firewall whether authenticated by radius/tacacs or local credentials.

[dassey111]

The default value is 5 minutes I believe.

So this is a great command and a great effort on your part. This will END the SESSION after X minutes of IDLE time.

And to be honest, I may have to use this command.

[cofee]

This should be CAT II NET1645 DISA STIG - This command will take care of it.

[nspasov]

Hi there, I believe the command that you are looking for is:

console timeout 1

Here is the description of the command directly from the config guide:

Changing the Console Timeout Period

To change the console timeout period, or the duration of time the management console remains active before automatically shutting down, perform the following steps.

Detailed Steps

Command	Purpose
console timeoutnumber Example: hostname(config)# console timeout 0	Specifies the idle time in minutes (0 through 60) after which the console session ends. The default timeout is 0, which means the console session will not time out.

I hope this helps!

Thank you for rating helpful posts!

[dassey111]

Oh, thanks for giving it a go. Good on you.

That is a good command if I want my session to last 1 minute in total time period. But, alas, I want the authentication time period to last less than 1 minute. Not the actual session.