STIGQter: STIG Summary: Arctic Wolf CylanceON-PREM Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 27 May 2025:

CylanceON-PREM must be configured to initiate a session timeout after 10 minutes of inactivity.

DISA Rule

SV-272628r1113425_rule

Vulnerability Number

V-272628

Group Title

SRG-APP-000003

Rule Version

CYLN-OP-000015

Severity

CAT II

CCI(s)

CCI-000057 - The information system initiates a session lock after the organization-defined time period of inactivity.
CCI-001133 - Terminate the network connection associated with a communications session at the end of the session or after an organization-defined time period of inactivity.
CCI-002361 - Automatically terminate a user session after organization-defined conditions or trigger events requiring session disconnect.

Weight

Fix Recommendation

Configure Session timeout. Administrator privileges are required to change Session timeout.

1. Log in to the admin console.
2. Navigate to CONFIGURATION >> Settings.
3. Find "Session Timeout". Click "Edit".
4. Set to 10 minutes.
5. Click "Apply".

Check Contents

Verify Session timeout.

1. Log in to the admin console.
2. Navigate to CONFIGURATION >> Settings.
3. Find Session Timeout.

If the value is not set to 10 minutes, this is a finding.

Vulnerability Number

V-272628

Documentable

False

Rule Version

CYLN-OP-000015

Severity Override Guidance

Verify Session timeout.

1. Log in to the admin console.
2. Navigate to CONFIGURATION >> Settings.
3. Find Session Timeout.

If the value is not set to 10 minutes, this is a finding.

Check Content Reference

Target Key

5692