STIGQter: STIG Summary: Ivanti Sentry 9.x NDM Security Technical Implementation Guide Version: 3 Release: 1 Benchmark Date: 24 Oct 2024:

Sentry must initiate a session lock after a 15-minute period of inactivity.

DISA Rule

SV-250984r1028211_rule

Vulnerability Number

V-250984

Group Title

SRG-APP-000003-NDM-000202

Rule Version

MOIS-ND-000050

Severity

CAT II

CCI(s)

• CCI-000057 - The information system initiates a session lock after the organization-defined time period of inactivity.

Weight

10

Fix Recommendation

Set the System Manager Timeout to 15 minutes.

1. Log in to the Sentry System Manager.
2. Navigate to Settings >> Timeout.
3. Configure the System Manager timeout to 15.
4. Click "Apply" and "Save" in the top right corner.

Check Contents

Verify the System manager Timeout is set to 15 minutes.

1. Log in to the Sentry System Manager.
2. Navigate to Settings >> Timeout.
3. Verify the System Manager timeout is set to 15.

If the System Manager timeout is not set to 15, this is a finding.

Vulnerability Number

V-250984

Documentable

False

Rule Version

MOIS-ND-000050

Severity Override Guidance

Verify the System manager Timeout is set to 15 minutes.

1. Log in to the Sentry System Manager.
2. Navigate to Settings >> Timeout.
3. Verify the System Manager timeout is set to 15.

If the System Manager timeout is not set to 15, this is a finding.

Check Content Reference

M

Target Key

5438