← Back to Omnissa Horizon Unified Access Gateway (UAG) Security Technical Implementation Guide

V-286591

CAT II (Medium)

The UAG must limit the length of time that a client session can stay connected.

Rule ID

SV-286591r1290936_rule

STIG

Omnissa Horizon Unified Access Gateway (UAG) Security Technical Implementation Guide

Version

V1R1

CCIs

CCI-001133 CCI-002038

Discussion

Terminating an idle session within a short time period reduces the window of opportunity for unauthorized personnel to take control of a user session. For this reason, the UAG must enforce an absolute limit on client connection times. Note: This value must be the same as the "Forcibly disconnect users" setting on the Horizon Connection Server(s). Satisfies: SRG-NET-000213-ALG-000107, SRG-NET-000337-ALG-000096

Check Content

Log in to the UAG administrative interface as an administrator.

Select "Configure Manually".

Navigate to Advanced Settings >> System Configuration.

Click the gear icon to edit.

Scroll down to the "Session Timeout" field.

If the "Session Timeout" is not configured within the organization defined permitted time limit (default is 10 hours), this is a finding.

Fix Text

Log in to the UAG administrative interface as an administrator.

Select "Configure Manually".

Navigate to Advanced Settings >> System Configuration.

Click the gear icon to edit.

Scroll down to the "Session Timeout" field.

Set the "Session Timeout" value within the organization defined permitted time limit.

Click "Save".

Note: The "Session Timeout" value on the UAG must be the same as the "Forcibly disconnect users" value on the Horizon Connection Server(s).