STIGQter STIGQter: STIG Summary: Cisco ISE NDM Security Technical Implementation Guide Version: 2 Release: 4 Benchmark Date: 01 Jul 2026:

The Cisco ISE must prevent non-privileged users from executing privileged functions to include disabling, circumventing, or altering implemented security safeguards/countermeasures.

DISA Rule

SV-242615r961353_rule

Vulnerability Number

V-242615

Group Title

SRG-APP-000340-NDM-000288

Rule Version

CSCO-NM-000090

Severity

CAT I

CCI(s)

Weight

10

Fix Recommendation

Configure Role Based Access Control to ensure only administrator accounts have admin or super admin rights.

From web Admin portal:
1. Navigate to Administration >> System >> Admin Access >> Authorization >> Permissions > Policy.
2. Take note of admin account groups.
3. Navigate to Administration >> System >> Admin Access >> Administrators >> Admin Users.
4. Ensure only admin accounts are placed within admin groups.

Note: If Active Directory is in use for external authentication, verify from AD that only administrative users are in the security group used for ISE admins.

Check Contents

Verify that only administrator accounts are located in administrative groups.

From the web Admin portal:
1. Navigate to Administration >> System >> Admin Access >> Authorization >> Permissions >> Policy.
2. Verify non-administrative users are located in read only or limited access admin groups. If non-adminstrative accounts are in administrative admin groups, this is a finding.

Vulnerability Number

V-242615

Documentable

False

Rule Version

CSCO-NM-000090

Severity Override Guidance

Verify that only administrator accounts are located in administrative groups.

From the web Admin portal:
1. Navigate to Administration >> System >> Admin Access >> Authorization >> Permissions >> Policy.
2. Verify non-administrative users are located in read only or limited access admin groups. If non-adminstrative accounts are in administrative admin groups, this is a finding.

Check Content Reference

M

Target Key

5384