STIGQter: STIG Summary: HYCU Protege Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 01 Jul 2026:

The HYCU virtual appliance must terminate all network connections associated with a device management session at the end of the session, or the session must be terminated after five minutes of inactivity except to fulfill documented and validated mission requirements.

DISA Rule

SV-268301r1195282_rule

Vulnerability Number

V-268301

Group Title

SRG-APP-000190-NDM-000267

Rule Version

HYCU-ND-000950

Severity

CAT I

CCI(s)

• CCI-001133 - Terminate the network connection associated with a communications session at the end of the session or after an organization-defined time period of inactivity.

Weight

10

Fix Recommendation

Configure the operating system to enforce timeout settings.

Add the following line to "/home/hycu/.bashrc" (or modify the line to have the required value):
TMOUT=300

Add the following line to "/etc/ssh/sshd_config" (or modify the line to have the required value):
ClientAliveInterval 300

Edit the "/opt/grizzly/config.properties" file by running the command:
sudo vi /opt/grizzly/config.properties

Add the following line or modify the line to have the required value:
api.session.expiration.minutes=5

Save the file by typing:
:wq!

Check Contents

Log in to the HYCU VM console. For console connections, check for the value of the "TMOUT" option in "/home/hycu/.bashrc" with the following command:
grep TMOUT /home/hycu/.bashrc

If the "TMOUT" value is not set to "300" or less, this is a finding.

For SSH connections, check for the value of the "ClientAliveInterval" option in "/etc/ssh/sshd_config" with the following command:
grep ClientAliveInterval /etc/ssh/sshd_config

If the "ClientAliveInterval" value is not set to "300" or less, this is a finding.

For UI connections, run the following command to check configured HYCU session timeout:
cat /opt/grizzly/config.properties | grep api.session.expiration.minutes

If not configured at "5" or less, this is a finding.

Vulnerability Number

V-268301

Documentable

False

Rule Version

HYCU-ND-000950

Severity Override Guidance

Log in to the HYCU VM console. For console connections, check for the value of the "TMOUT" option in "/home/hycu/.bashrc" with the following command:
grep TMOUT /home/hycu/.bashrc

If the "TMOUT" value is not set to "300" or less, this is a finding.

For SSH connections, check for the value of the "ClientAliveInterval" option in "/etc/ssh/sshd_config" with the following command:
grep ClientAliveInterval /etc/ssh/sshd_config

If the "ClientAliveInterval" value is not set to "300" or less, this is a finding.

For UI connections, run the following command to check configured HYCU session timeout:
cat /opt/grizzly/config.properties | grep api.session.expiration.minutes

If not configured at "5" or less, this is a finding.

Check Content Reference

M

Target Key

5660