STIGQter: STIG Summary: Arctic Wolf CylanceON-PREM Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 27 May 2025:

CylanceON-PREM must disable all functions, ports, protocols and services not required.

DISA Rule

SV-272638r1113550_rule

Vulnerability Number

V-272638

Group Title

SRG-APP-000383

Rule Version

CYLN-OP-000815

Severity

CAT II

CCI(s)

• CCI-001762 - Disable or remove organization-defined functions, ports, protocols, software, and services within the system deemed to be unnecessary and/or nonsecure.

Weight

10

Fix Recommendation

Configure ports to external subordinate services such as syslog/SEIM, SMTP, etc. Administrator privileges are required.

1. Log in to the admin console.
2. Navigate to CONFIGURATION >> Settings.
3. Disable nonrequired features.
4. Ensure the ports used are accurate.
5. Check with subordinate systems administrators to verify and correct port settings as necessary.
6. Reboot the server.

Check Contents

Verify port configuration to external subordinate services such as syslog/SEIM, SMTP, etc. Administrator privileges are required.

1. Log in to the admin console.
2. Navigate to CONFIGURATION >> Settings.
3. Review settings.
4. Verify the ports used are accurate.

If any ports are being used that are not required, this is a finding.

Vulnerability Number

V-272638

Documentable

False

Rule Version

CYLN-OP-000815

Severity Override Guidance

Verify port configuration to external subordinate services such as syslog/SEIM, SMTP, etc. Administrator privileges are required.

1. Log in to the admin console.
2. Navigate to CONFIGURATION >> Settings.
3. Review settings.
4. Verify the ports used are accurate.

If any ports are being used that are not required, this is a finding.

Check Content Reference

M

Target Key

5692