STIGQter: STIG Summary:| Checked | Name | Title |
|---|---|---|
| ☐ | SV-269569r1155155_rule | Xylok Security Suite must protect application-specific data. |
| ☐ | SV-269570r1053485_rule | Xylok Security Suite must limit system resources consumed by the application. |
| ☐ | SV-269571r1055707_rule | Xylok Security Suite must initiate a session lock after a 15-minute period of inactivity. |
| ☐ | SV-269572r1053491_rule | Xylok Security Suite must expire a session upon browser closing. |
| ☐ | SV-269573r1054093_rule | Xylok Security Suite must prevent access except through HTTPS. |
| ☐ | SV-269574r1053497_rule | Xylok Security Suite must use a centralized user management solution. |
| ☐ | SV-269575r1054094_rule | Xylok Security Suite must display the Standard Mandatory DOD Notice and Consent Banner before granting access. |
| ☐ | SV-269576r1053503_rule | Xylok Security Suite must protect audit information from any type of unauthorized access. |
| ☐ | SV-269577r1053506_rule | Xylok Security Suite must be running a supported version. |
| ☐ | SV-269578r1054098_rule | The Xylok Security Suite READONLY configuration must be True. |
| ☐ | SV-269579r1053512_rule | Xylok Security Suite must disable nonessential capabilities. |
| ☐ | SV-269580r1053515_rule | The Xylok Security Suite configuration for DEBUG must be False. |
| ☐ | SV-269581r1054095_rule | Xylok Security Suite must not allow local user or groups. |
| ☐ | SV-269582r1053521_rule | The Xylok Security Suite configuration file must be protected. |
| ☐ | SV-269583r1053524_rule | Xylok Security Suite must audit the enforcement actions used to restrict access associated with changes to it. |
| ☐ | SV-269584r1054096_rule | Xylok Security Suite must only allow the use of DOD Public Key Infrastructure (PKI) established certificate authorities (CAs) for verification of the establishment of protected sessions. |
| ☐ | SV-269585r1053530_rule | Xylok Security Suite must maintain the confidentiality and disable the use of SMTP. |
| ☐ | SV-269586r1155158_rule | Xylok Security Suite must use a central log server for auditing records. |
| ☐ | SV-269740r1054081_rule | Xylok Security Suite must use a valid DOD-issued certification. |