← Back to Xylok Security Suite 20.x Security Technical Implementation Guide

V-269585

CAT I (High)

Xylok Security Suite must maintain the confidentiality and disable the use of SMTP.

Rule ID

SV-269585r1053530_rule

STIG

Xylok Security Suite 20.x Security Technical Implementation Guide

Version

V1R2

CCIs

CCI-002420

Discussion

Disabling the use of SMTP within the Xylok Security Suite is a strategic decision aimed at enhancing security, ensuring compliance, and reducing operational risks. By eliminating the potential vulnerabilities associated with email communications, Xylok can better protect sensitive data and maintain a robust security posture.

Check Content

Verify USE_SMTP is configured by executing the following:
$ grep USE_SMTP /etc/xylok.conf

If "USE_SMTP" is not set to "False" or is missing, this is a finding.

Fix Text

Set USE_SMTP:
1. As root, open /etc/xylok.conf in a text editor.

2. Add/Amend "USE_SMTP=False" to the configuration file.

3. Restart Xylok to apply settings by executing the following:
# systemctl restart xylok