← Back to Arctic Wolf CylanceON-PREM Security Technical Implementation Guide

V-272634

CAT II (Medium)

CylanceON-PREM must be configured to send alerts via Simple Mail Transfer Protocol (SMTP).

Rule ID

SV-272634r1113494_rule

STIG

Arctic Wolf CylanceON-PREM Security Technical Implementation Guide

Version

V1R1

CCIs

CCI-001294 CCI-001243 CCI-004966

Discussion

Failure to notify personnel of failed tests introduces a risk to the system. Corrective action and the unsecure condition(s) will remain. Satisfies: SRG-APP-000275, SRG-APP-000279, SRG-APP-000940

Check Content

Verify SMTP Settings. Administrator privileges are required.

1. Log in to the admin console.
2. Navigate to CONFIGURATION >> Settings.
3. Find SMTP.

If SMTP is not enabled, this is a finding. 

If SMTP settings are not populated and event type notifications not enabled, this is a finding.

Fix Text

Configure SMTP Settings. Administrator privileges are required. 

1. Log in to the admin console.
2. Navigate to CONFIGURATION >> Settings.
3. Find SMTP and click on the edit button.
4. Slide the button to enable.
5. Populate the Syslog/SIEM configuration.
6. Click the green check to save.