03.13.09: Network Disconnect
Control Family:
Threats Addressed:
Previous Version:
- NIST Special Publication 800-171 Revision 2:
- 3.13.9: Terminate network connections associated with communications sessions at the end of the sessions or after a defined period of inactivity
Requirements
- Terminate the network connection associated with a communications session at the end of the session or after [Assignment: organization-defined time period] of inactivity.
Discussion
This requirement applies to internal and external networks. Terminating network connections associated with communications sessions includes deallocating TCP/IP addresses or port pairs at the operating system level or deallocating networking assignments at the application level if multiple application sessions are using a single network connection. Time periods of inactivity may be established by organizations and include time periods by type of network access or for specific network accesses.