STIGQter: STIG Summary: Arctic Wolf CylanceON-PREM Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 27 May 2025:

CylanceON-PREM must be configured to send alerts via Simple Mail Transfer Protocol (SMTP).

DISA Rule

SV-272634r1113494_rule

Vulnerability Number

V-272634

Group Title

SRG-APP-000275

Rule Version

CYLN-OP-000560

Severity

CAT II

CCI(s)

• CCI-001294 - Alert organization-defined personnel or roles of failed security verification tests.
• CCI-001243 - Configure malicious code protection mechanisms to block malicious code; quarantine malicious code; and/or take organization-defined action(s) in response to malicious code detection.
• CCI-004966 - Configure malicious code protection mechanisms to send alerts to organization-defined personnel in response to malicious code detection.

Weight

10

Fix Recommendation

Configure SMTP Settings. Administrator privileges are required.

1. Log in to the admin console.
2. Navigate to CONFIGURATION >> Settings.
3. Find SMTP and click on the edit button.
4. Slide the button to enable.
5. Populate the Syslog/SIEM configuration.
6. Click the green check to save.

Check Contents

Verify SMTP Settings. Administrator privileges are required.

1. Log in to the admin console.
2. Navigate to CONFIGURATION >> Settings.
3. Find SMTP.

If SMTP is not enabled, this is a finding.

If SMTP settings are not populated and event type notifications not enabled, this is a finding.

Vulnerability Number

V-272634

Documentable

False

Rule Version

CYLN-OP-000560

Severity Override Guidance

Verify SMTP Settings. Administrator privileges are required.

1. Log in to the admin console.
2. Navigate to CONFIGURATION >> Settings.
3. Find SMTP.

If SMTP is not enabled, this is a finding.

If SMTP settings are not populated and event type notifications not enabled, this is a finding.

Check Content Reference

M

Target Key

5692