STIGUI
V-269585CAT I — High severitySV-269585r1053530_rule

Xylok Security Suite must maintain the confidentiality and disable the use of SMTP.

Rule version XYLK-20-000199 · STIG v1 · 2025-12-04

Discussion

Disabling the use of SMTP within the Xylok Security Suite is a strategic decision aimed at enhancing security, ensuring compliance, and reducing operational risks. By eliminating the potential vulnerabilities associated with email communications, Xylok can better protect sensitive data and maintain a robust security posture.

Check

Verify USE_SMTP is configured by executing the following: $ grep USE_SMTP /etc/xylok.conf

If "USE_SMTP" is not set to "False" or is missing, this is a finding.

Fix

Set USE_SMTP: 1. As root, open /etc/xylok.conf in a text editor.

2. Add/Amend "USE_SMTP=False" to the configuration file.

3. Restart Xylok to apply settings by executing the following: # systemctl restart xylok

Identifiers

Group ID
V-269585
Group title
SRG-APP-000441
Rule ID
SV-269585r1053530_rule
Check ID
C-73618r1053528_chk
Fix ID
F-73519r1053529_fix