Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
Idle timeout for the management application must be set to 10 minutes.
Description
Discussion Text
Tomcat can set idle session timeouts on a per application basis. The management application is provided with the Tomcat installation and is used to manage the applications that are installed on the Tomcat Server. Setting the idle timeout for the management application will kill the admin user's session after 10 minutes of inactivity. This will limit the opportunity for unauthorized persons to hijack the admin session. This setting will also affect the default timeout behavior of all hosted web applications. To adjust the individual hosted application settings that are not related to management of the system, modify the individual application web.xml file if application timeout requirements differ from the STIG.
Satisfies: SRG-APP-000389, SRG-APP-000220
Satisfies: SRG-APP-000389, SRG-APP-000220
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.