CylanceON-PREM must be configured to initiate a session timeout after 10 minutes of inactivity.

Overview

Finding IDVersionRule IDIA ControlsSeverity
V-272628CYLN-OP-000015SV-272628r1113425_ruleCCI-000057medium
Description
Ensuring inactive sessions are terminated provides protection against misuse of the system. Satisfies: SRG-APP-000003, SRG-APP-000190, SRG-APP-000295
STIGDate
Arctic Wolf CylanceON-PREM Security Technical Implementation Guide2025-06-11

Details

Check Text (C-272628r1113425_chk)

Verify Session timeout. 1. Log in to the admin console. 2. Navigate to CONFIGURATION >> Settings. 3. Find Session Timeout. If the value is not set to 10 minutes, this is a finding.

Fix Text (F-76614r1113424_fix)

Configure Session timeout. Administrator privileges are required to change Session timeout. 1. Log in to the admin console. 2. Navigate to CONFIGURATION >> Settings. 3. Find "Session Timeout". Click "Edit". 4. Set to 10 minutes. 5. Click "Apply".