STIGQter: STIG Summary: Arctic Wolf CylanceON-PREM Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 27 May 2025:

CylanceON-PREM must be restarted every 30 days to invoke health checks.

DISA Rule

SV-272641r1112773_rule

Vulnerability Number

V-272641

Group Title

SRG-APP-000473

Rule Version

CYLN-OP-001105

Severity

CAT II

CCI(s)

CCI-002699 - Perform verification of the correct operation of organization-defined security functions: when the system is in an organization-defined transitional state; upon command by a user with appropriate privileges; and/or on an organization-defined frequency.
CCI-002710 - Perform an integrity check of organization-defined software at startup, at organization-defined transitional states or security-relevant events, or on an organization-defined frequency.

Weight

Fix Recommendation

Reboot the server. Administrator privileges are required.

1. Perform a backup.
2. Navigate to CONFIGURATION >> Settings.
3. Enable Maintenance Mode.
4. Click on "Reboot".

Check Contents

Verify the reboot date. Administrator privileges are required.

1. Click AUDIT LOGS.
2. Search for "Reboot" and note the date.

If date is more than 30 days in the past, this is a finding.

Vulnerability Number

V-272641

Documentable

False

Rule Version

CYLN-OP-001105

Severity Override Guidance

Verify the reboot date. Administrator privileges are required.

1. Click AUDIT LOGS.
2. Search for "Reboot" and note the date.

If date is more than 30 days in the past, this is a finding.

Check Content Reference

Target Key

5692