Network connections associated with communications sessions are terminated at the end of the sessions.
Terminate network connections associated with communications sessions at the end of the sessions or after a defined period of inactivity.
This requirement applies to internal and external networks. Terminating network connections associated with communications sessions include de-allocating associated TCP/IP address or port pairs at the operating system level, or de-allocating networking assignments at the application level if multiple application sessions are using a single, operating system-level network connection. Time periods of user inactivity may be established by organizations and include time periods by type of network access or for specific network accesses