STIGUI
V-272628CAT II — Medium severitySV-272628r1113425_rule

CylanceON-PREM must be configured to initiate a session timeout after 10 minutes of inactivity.

Rule version CYLN-OP-000015 · STIG v1 · 2025-06-11

Discussion

Ensuring inactive sessions are terminated provides protection against misuse of the system.

Satisfies: SRG-APP-000003, SRG-APP-000190, SRG-APP-000295

Check

Verify Session timeout.

1. Log in to the admin console. 2. Navigate to CONFIGURATION >> Settings. 3. Find Session Timeout.

If the value is not set to 10 minutes, this is a finding.

Fix

Configure Session timeout. Administrator privileges are required to change Session timeout.

1. Log in to the admin console. 2. Navigate to CONFIGURATION >> Settings. 3. Find "Session Timeout". Click "Edit". 4. Set to 10 minutes. 5. Click "Apply".

Identifiers

Group ID
V-272628
Group title
SRG-APP-000003
Rule ID
SV-272628r1113425_rule
Check ID
C-76709r1113423_chk
Fix ID
F-76614r1113424_fix