STIGQter: STIG Summary: Cisco ISE NDM Security Technical Implementation Guide Version: 2 Release: 4 Benchmark Date: 01 Jul 2026:

The Cisco ISE must conduct configuration and operational backups when changes are made or must schedule backups weekly, at a minimum.

DISA Rule

SV-242638r1026048_rule

Vulnerability Number

V-242638

Group Title

SRG-APP-000516-NDM-000341

Rule Version

CSCO-NM-000330

Severity

CAT III

CCI(s)

• CCI-000366 - Implement the security configuration settings.
• CCI-000539 - Conduct backups of system documentation, including security-related documentation, per an organization-defined frequency that is consistent with recovery time and recovery point objectives.
• CCI-000537 - Conduct backups of system-level information contained in the system per organization-defined frequency that is consistent with recovery time and recovery point objectives.

Weight

10

Fix Recommendation

1. To configure a repository, navigate to Administration >> System >> Maintenance > Repository.
2. Click "Add".
3. Provide a Repository Name and choose SFTP (recommended) or a secure protocol. Then enter Server Name, Path, User Name, and Password, and click "Submit". The repository must be on another device such as the syslog or SFTP server.

On-demand and/or scheduled configuration and operational data backups are as follows:
1. Navigate to Administration >> System >> Backup & Restore.
2. Select "Configuration Data Backup".
3. Provide a Backup Repository Name, Encryption Key, and scheduling information in compliance with SSP.
4. Click "Backup".
5. Repeat steps with Step 2 being the Operational Data Backup option.

Check Contents

Review the SSP to see the site's network device backup policy.
1. Navigate to Administration >> System >> Backup and Restore.
2. Check the Cisco ISE backup log to verify regular backups are being performed.

If configuration and operational backups are not being performed when changes are made and/or scheduled weekly (at a minimum), this is a finding.

Vulnerability Number

V-242638

Documentable

False

Rule Version

CSCO-NM-000330

Severity Override Guidance

Review the SSP to see the site's network device backup policy.
1. Navigate to Administration >> System >> Backup and Restore.
2. Check the Cisco ISE backup log to verify regular backups are being performed.

If configuration and operational backups are not being performed when changes are made and/or scheduled weekly (at a minimum), this is a finding.

Check Content Reference

M

Target Key

5384