UCF STIG Viewer Logo

The Oracle SQLNET.EXPIRE_TIME parameter should be set to a value greater than 0.


Finding ID Version Rule ID IA Controls Severity
V-3863 DO0287-ORACLE10 SV-24892r1_rule ECLO-1 Medium
The SQLNET.EXPIRE_TIME parameter defines a limit for the frequency of active connection verification of a client connection. This prevents indefinite open connections to the database where client connections have not been terminated properly. Indefinite open connections could lead to an exhaustion of system resources or leave an open connection available for compromise.
Oracle 10 Database Installation STIG 2014-01-14


Check Text ( C-29444r1_chk )
View the SQLNET.ORA file to verify if a SQLNET.EXPIRE_TIME has been set to the value greater than 0.

If the parameter does not exist or is set to 0, this is a Finding.
Fix Text (F-26506r1_fix)
Using a text editor or administrative tool, modify the SQLNET.ORA file on the database host server to include a limit for connection request timeouts for the listener.

Example entry (value unit is in minutes):


NOTE: Use the lowest number possible that does not generate so much network traffic that performance becomes unacceptable. The lower the number, the less likely an exhaustion of resources will occur. Set the value to the lowest number greater than 0 that is supported by the target system environment.