CylanceON-PREM must be configured to initiate a session timeout after 10 minutes of inactivity.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-272628 | CYLN-OP-000015 | SV-272628r1113425_rule | Medium |
| Description |
| Ensuring inactive sessions are terminated provides protection against misuse of the system. Satisfies: SRG-APP-000003, SRG-APP-000190, SRG-APP-000295 |
| STIG | Date |
| Arctic Wolf CylanceON-PREM Security Technical Implementation Guide | 2025-06-11 |
Details
| Check Text (C-76709r1113423_chk) |
| Verify Session timeout. 1. Log in to the admin console. 2. Navigate to CONFIGURATION >> Settings. 3. Find Session Timeout. If the value is not set to 10 minutes, this is a finding. |
| Fix Text (F-76614r1113424_fix) |
| Configure Session timeout. Administrator privileges are required to change Session timeout. 1. Log in to the admin console. 2. Navigate to CONFIGURATION >> Settings. 3. Find "Session Timeout". Click "Edit". 4. Set to 10 minutes. 5. Click "Apply". |