STIGQter: STIG Summary: Xylok Security Suite 20.x Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 05 Jan 2026:

Xylok Security Suite must initiate a session lock after a 15-minute period of inactivity.

DISA Rule

SV-269571r1055707_rule

Vulnerability Number

V-269571

Group Title

SRG-APP-000003

Rule Version

XYLK-20-000003

Severity

CAT II

CCI(s)

• CCI-000057 - The information system initiates a session lock after the organization-defined time period of inactivity.
• CCI-001133 - Terminate the network connection associated with a communications session at the end of the session or after an organization-defined time period of inactivity.

Weight

10

Fix Recommendation

Set the session length:
1. As root, open /etc/xylok.conf in a text editor.

2. Add/Amend "SESSION_LENGTH=900" to the configuration file.

3. Restart Xylok to apply settings by executing the following:
# systemctl restart xylok

Check Contents

Verify session is configured to lock after 15 minutes of inactivity. Execute the following:
$ grep SESSION_LENGTH /etc/xylok.conf

SESSION_LENGTH=900

If "SESSION_LENGTH" is set to more than 15 minutes or is missing, this is a finding.

Note: The setting is in seconds. 900 seconds = 15 minutes

Vulnerability Number

V-269571

Documentable

False

Rule Version

XYLK-20-000003

Severity Override Guidance

Verify session is configured to lock after 15 minutes of inactivity. Execute the following:
$ grep SESSION_LENGTH /etc/xylok.conf

SESSION_LENGTH=900

If "SESSION_LENGTH" is set to more than 15 minutes or is missing, this is a finding.

Note: The setting is in seconds. 900 seconds = 15 minutes

Check Content Reference

M

Target Key

5665