Re: Timeout -Inactivity

From: Dan (sfml@sneakernetsecurity.com)
Date: 01/09/02 

Date: Wed, 9 Jan 2002 16:28:40 -0500
From: Dan <sfml@sneakernetsecurity.com>
To: security-basics@securityfocus.com

Well from a user standpoint I've seen severs log shell users out after
15 minutes of inactivity. For accounting its the same. I've seen
certain network applications lockup after 2 hours of no activity.

You can also look at email services like hotmail and yahoo that give
users selectable ranges for timeouts.

Dan

> I was wondering what everyone else is using as timeouts for the
> following configurations:
>
> Internal systems?
> Web based applications?
> Is the timeout configuration different between your external customers
> and internal users?
>
> Could I get any feedback on this issue?