Terminate network connections associated with communications sessions at the end of the sessions or after a defined period of inactivity.

Prevent malicious actors from taking advantage of an open network session or an unattended computer at the end of the connection. Balance user work patterns and needs against security to determine the length of inactivity that will force a termination.

Establish a policy specifying the period of inactivity before a network connection is terminated. This can be implemented on your firewall by setting the idle time out settings (e.g., in seconds: UDP = 5, TCP = 1800, ICMP = 5, Other = 180). You should set a timeout for remote VPN connections (e.g, timeout after 60 minutes of inactivity).