You can set a timeout for idle vSphere Client sessions. This allows you to close sessions automatically, which reduces the potential for unauthorized users to access vCenter Server.

On each Windows system where the vSphere Client is installed, verify that an idle timeout is set.

You can specify the idle timeout as a parameter in the vpxClient.exe.config file (typically, C:\Program Files\VMware\Infrastructure\Virtual Infrastructure Client\Launcher\VpxClient.exe.config).

Alternatively, advise users to run the vSphere Client executable with a flag set for the timeout value (for example, vpxClient.exe -inactivityTimeout 5, where 5 is five minutes).

This client-side setting can be changed by the user. After you set the default timeout value, periodically audit the configuration file.