Idle session timeout standardization

ngwaf-announcementsfixed

To improve security on the Fastly platform, sessions in the Signal Sciences control panel are subject to an idle timeout similar to the behavior already present in the Fastly control panel. If you close your browser, your session will automatically expire after 30 minutes. While the browser remains open, sessions remain active up to the configured maximum session timeout, which has a default of 12 hours and a minimum of 30 minutes.

Prior change: Added virtual patch for CVE-2025-55184 (React DoS, also covers CVE-2025-67779)