To ensure the SSH idle timeout occurs precisely when the 'ClientAliveCountMax' is set, edit '/etc/ssh/sshd_config' as follows: 'ClientAliveCountMax 0' [no/yes] This ensures a user login will be terminated as soon as the 'ClientAliveCountMax' is reached. oval:org.secpod.oval:def:30612 oval:org.secpod.oval:def:31335 SCAP Repo OVAL Definition 2015-11-13