STIGQter: STIG Summary: Xylok Security Suite 20.x Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 05 Jan 2026:

Xylok Security Suite must maintain the confidentiality and disable the use of SMTP.

DISA Rule

SV-269585r1053530_rule

Vulnerability Number

V-269585

Group Title

SRG-APP-000441

Rule Version

XYLK-20-000199

Severity

CAT I

CCI(s)

CCI-002420 - Maintain the confidentiality and/or integrity of information during preparation for transmission.

Weight

Fix Recommendation

Set USE_SMTP:
1. As root, open /etc/xylok.conf in a text editor.

2. Add/Amend "USE_SMTP=False" to the configuration file.

3. Restart Xylok to apply settings by executing the following:
# systemctl restart xylok

Check Contents

Verify USE_SMTP is configured by executing the following:
$ grep USE_SMTP /etc/xylok.conf

If "USE_SMTP" is not set to "False" or is missing, this is a finding.

Vulnerability Number

V-269585

Documentable

False

Rule Version

XYLK-20-000199

Severity Override Guidance

Verify USE_SMTP is configured by executing the following:
$ grep USE_SMTP /etc/xylok.conf

If "USE_SMTP" is not set to "False" or is missing, this is a finding.

Check Content Reference

Target Key

5665