← Back to Arctic Wolf CylanceON-PREM Security Technical Implementation Guide

V-272638

CAT II (Medium)

CylanceON-PREM must disable all functions, ports, protocols and services not required.

Rule ID

SV-272638r1113550_rule

STIG

Arctic Wolf CylanceON-PREM Security Technical Implementation Guide

Version

V1R1

CCIs

CCI-001762

Discussion

Unnecessary or unsecured ports, protocols, and services present many risks for attackers and may go undetected.

Check Content

Verify port configuration to external subordinate services such as syslog/SEIM, SMTP, etc. Administrator privileges are required.

1. Log in to the admin console.
2. Navigate to CONFIGURATION >> Settings.
3. Review settings.
4. Verify the ports used are accurate.

If any ports are being used that are not required, this is a finding.

Fix Text

Configure ports to external subordinate services such as syslog/SEIM, SMTP, etc. Administrator privileges are required. 

1. Log in to the admin console.
2. Navigate to CONFIGURATION >> Settings.
3. Disable nonrequired features. 
4. Ensure the ports used are accurate.
5. Check with subordinate systems administrators to verify and correct port settings as necessary.
6. Reboot the server.