Check: CYLN-OP-001105
Arctic Wolf CylanceON-PREM STIG:
CYLN-OP-001105
(in version v1 r1)
Title
CylanceON-PREM must be restarted every 30 days to invoke health checks. (Cat II impact)
Discussion
Restarting CylanceON-PREM every 30 days ensures system stability and performance. Regular health checks of the system reduce the risk of security function failures in the system. Satisfies: SRG-APP-000473, SRG-APP-000475
Check Content
Verify the reboot date. Administrator privileges are required. 1. Click AUDIT LOGS. 2. Search for "Reboot" and note the date. If date is more than 30 days in the past, this is a finding.
Fix Text
Reboot the server. Administrator privileges are required. 1. Perform a backup. 2. Navigate to CONFIGURATION >> Settings. 3. Enable Maintenance Mode. 4. Click on "Reboot".
Additional Identifiers
Rule ID: SV-272641r1112773_rule
Vulnerability ID: V-272641
Group Title: SRG-APP-000473
Expert Comments
CCIs
| Number | Definition |
|---|---|
| CCI-002699 |
Perform verification of the correct operation of organization-defined security functions: when the system is in an organization-defined transitional state; upon command by a user with appropriate privileges; and/or on an organization-defined frequency. |
| CCI-002710 |
Perform an integrity check of organization-defined software at startup, at organization-defined transitional states or security-relevant events, or on an organization-defined frequency. |