SC-10 Network Disconnect
NIST SP 800-53 (controls) 5.2.0 against 5.2.0
All changes in this version
All changes in this version
Title
Network Disconnect
Control
Terminate the network connection associated with a communications session at the end of the session or after [Assignment: time period] of inactivity.
Discussion
Network disconnect applies to internal and external networks. Terminating network connections associated with specific communications sessions includes de-allocating TCP/IP address or port pairs at the operating system level and de-allocating the networking assignments at the application level if multiple application sessions are using a single operating system-level network connection. Periods of inactivity may be established by organizations and include time periods by type of network access or for specific network accesses.
Parameters
sc-10_odp: time period
Related controls
ac-17, sc-23
Assessment objective
SC-10 the network connection associated with a communication session is terminated at the end of the session or after [Assignment: time period] of inactivity.
STIG rules that implement this control 32
Apple macOS 15 (Sequoia) V1R8
- APPL-15-000051 CAT II The macOS system must configure SSHD ClientAliveInterval to 900.
- APPL-15-000052 CAT II The macOS system must configure SSHD ClientAliveCountMax to 1.
- APPL-15-000053 CAT II The macOS system must set login grace time to 30.
- APPL-15-000110 CAT II The macOS system must configure the SSH ServerAliveInterval to 900.
- APPL-15-000120 CAT II The macOS system must configure SSHD channel timeout to 900.
- APPL-15-000130 CAT II The macOS system must configure SSHD unused connection timeout to 900.
- APPL-15-000140 CAT II The macOS system must set SSH Active Server Alive Maximum to 0.
Apple macOS 26 (Tahoe) V1R4
- APPL-26-000051 CAT II The macOS system must configure SSHD ClientAliveInterval to 900.
- APPL-26-000052 CAT II The macOS system must configure SSHD ClientAliveCountMax to 1.
- APPL-26-000053 CAT II The macOS system must set login grace time to 30.
- APPL-26-000110 CAT II The macOS system must configure the SSH ServerAliveInterval to 900.
- APPL-26-000120 CAT II The macOS system must configure SSHD channel timeout to 900.
- APPL-26-000130 CAT II The macOS system must configure SSHD unused connection timeout to 900.
- APPL-26-000140 CAT II The macOS system must set SSH Active Server Alive Maximum to 0.
Application Security and Development V6R5
- APSC-DV-002000 CAT II The application must terminate all network connections associated with a communications session at the end of the session.
Canonical Ubuntu 22.04 LTS V2R10
- UBTU-22-255030 CAT II Ubuntu 22.04 LTS must be configured so that all network connections associated with SSH traffic terminate after becoming unresponsive.
- UBTU-22-255035 CAT II Ubuntu 22.04 LTS must be configured so that all network connections associated with SSH traffic are terminated after 10 minutes of becoming unresponsive.
Canonical Ubuntu 24.04 LTS V1R7
- UBTU-24-600000 CAT II Ubuntu 24.04 LTS must immediately terminate all network connections associated with SSH traffic after a period of inactivity.
- UBTU-24-600010 CAT II Ubuntu 24.04 LTS must immediately terminate all network connections associated with SSH traffic at the end of the session or after 10 minutes of inactivity.
Cisco IOS XE Router NDM Y26M04
- CISC-ND-000720 CAT I The Cisco router must be configured to terminate all network connections associated with device management after five minutes of inactivity.
Microsoft Windows 11 V2R11
- WN11-SO-000070 CAT II The machine inactivity limit must be set to 15 minutes, locking the system with the screensaver.
Microsoft Windows Server 2022 V2R11
- WN22-DC-000160 CAT III Windows Server 2022 directory service must be configured to terminate LDAP-based network connections to the directory server after five minutes of inactivity.
Microsoft Windows Server 2025 V1R4
- WN25-DC-000160 CAT III Windows Server 2025 directory service must be configured to terminate LDAP-based network connections to the directory server after five minutes of inactivity.
- WN25-SH-000060 CAT II Windows Server 2025 OpenSSH must be configured so that all network connections associated with SSH traffic terminate after becoming unresponsive.
- WN25-SH-000070 CAT II Windows Server 2025 OpenSSH must be configured so that all network connections associated with SSH traffic are terminated after 10 minutes of becoming unresponsive.
Red Hat Enterprise Linux 10 V1R3
- RHEL-10-700660 CAT II RHEL 10 must be configured so that all network connections associated with Secure Shell (SSH) traffic terminate after becoming unresponsive.
- RHEL-10-700920 CAT II RHEL 10 must automatically exit interactive command shell user sessions after 10 minutes of inactivity.
- RHEL-10-700930 CAT II RHEL 10 must be configured with a timeout interval for the Secure Shell (SSH) daemon.
Red Hat Enterprise Linux 9 V2R10
- RHEL-09-255095 CAT II RHEL 9 must be configured so that all network connections associated with SSH traffic terminate after becoming unresponsive.
- RHEL-09-255100 CAT II RHEL 9 must be configured so that all network connections associated with SSH traffic are terminated after 10 minutes of becoming unresponsive.
- RHEL-09-412035 CAT II RHEL 9 must automatically exit interactive command shell user sessions after 10 minutes of inactivity.
- RHEL-09-412080 CAT II RHEL 9 must terminate idle user sessions.