STIGQter STIGQter: STIG Summary: Fortinet FortiGate Firewall NDM Security Technical Implementation Guide Version: 1 Release: 5 Benchmark Date: 05 Jan 2026:

The FortiGate device must terminate idle sessions after 10 minutes of inactivity.

DISA Rule

SV-234214r961068_rule

Vulnerability Number

V-234214

Group Title

SRG-APP-000190-NDM-000267

Rule Version

FGFW-ND-000275

Severity

CAT I

CCI(s)

Weight

10

Fix Recommendation

Log in to the FortiGate GUI with Super-Admin privilege.

1. Click System.
2. Click Settings.
3. Go to Administrative Settings.
4. Enter the Idle Timeout value of 10.
5. Click Apply.

or

1. Open a CLI console, via SSH or available from the GUI.
2. Run the following command:
# config system global
# set admintimeout 10
# end

Check Contents

Log in to the FortiGate GUI with Super-Admin privilege.

1. Click System.
2. Click Settings.
3. Go to Administrative Settings.
4. Verify Idle Timeout is configured to 10 minutes.

If the idle-timeout value is not 10 minutes, this is a finding.

or

1. Open a CLI console, via SSH or available from the GUI.
2. Run the following command:
# show full-configuration sys global | grep -i admintimeout

The output should be:
set admintimeout 10

If the admintimeout parameter is not set to 10 minutes, this is a finding.

Vulnerability Number

V-234214

Documentable

False

Rule Version

FGFW-ND-000275

Severity Override Guidance

Log in to the FortiGate GUI with Super-Admin privilege.

1. Click System.
2. Click Settings.
3. Go to Administrative Settings.
4. Verify Idle Timeout is configured to 10 minutes.

If the idle-timeout value is not 10 minutes, this is a finding.

or

1. Open a CLI console, via SSH or available from the GUI.
2. Run the following command:
# show full-configuration sys global | grep -i admintimeout

The output should be:
set admintimeout 10

If the admintimeout parameter is not set to 10 minutes, this is a finding.

Check Content Reference

M

Target Key

5260