User profiles are configured to automatically logout of the web session after 30 minutes. Automatic logout is not triggered by closing the browser. Therefore, an unauthorized user can access the web interface within 30 minutes. To minimize the risk, configure the automatic logout to 5 minutes in ABT Site.