The SQLNET.EXPIRE_TIME parameter defines a limit for the frequency of active connection verification of a client connection. This prevents indefinite open connections to the database where client connections have not been terminated properly. Indefinite open connections could lead to an exhaustion of system resources or leave an open connection available for compromise.
View the SQLNET.ORA file to verify if a SQLNET.EXPIRE_TIME has been set to the value greater than 0.
If the parameter does not exist or is set to 0, this is a Finding.
Fix Text (F-26506r1_fix)
Using a text editor or administrative tool, modify the SQLNET.ORA file on the database host server to include a limit for connection request timeouts for the listener.
Example entry (value unit is in minutes):
SQLNET.EXPIRE_TIME = 3
NOTE: Use the lowest number possible that does not generate so much network traffic that performance becomes unacceptable. The lower the number, the less likely an exhaustion of resources will occur. Set the value to the lowest number greater than 0 that is supported by the target system environment.