STIGQter: STIG Summary: Ivanti Sentry 9.x NDM Security Technical Implementation Guide Version: 3 Release: 1 Benchmark Date: 24 Oct 2024:

Sentry must generate an immediate real-time alert of all audit failure events requiring real-time alerts.

DISA Rule

SV-250998r1028236_rule

Vulnerability Number

V-250998

Group Title

SRG-APP-000360-NDM-000295

Rule Version

MOIS-ND-000690

Severity

CAT III

CCI(s)

• CCI-001858 - Provide an alert in an organization-defined real-time-period to organization-defined personnel, roles, and/or locations when organization-defined audit failure events requiring real-time alerts occur.

Weight

10

Fix Recommendation

Configure the Sentry to send alerts for failure events in Sentry System Manager web GUI.

1. Log in to Sentry.
2. Go to Monitoring >> Alert Configuration.
3. Check "Send Notification".
4. Apply Email List.
5. Enter Alerts Per Hour.
6. Enter Batch Time Interval (min).
7. Select "Default Alert Action".
8. Apply.
9. Add Alert Notification Management.
10. Add Alert ID.
11. Add "Action" from dropdown.
12. Click "Apply" and "Save" in the top right corner.

Refer to the "Alert Configuration" section of the "Sentry 9.8.0 Guide for MobileIron Core" for more information.

Check Contents

Verify the Sentry is configured to send alerts for failure events in Sentry System Manager web GUI.

1. Log in to Sentry.
2. Go to Monitoring >> Alert Configuration.
3. Verify Alert monitoring is configured.

If Alert Configuration settings are not configured, this is a finding.

Refer to the "Alert Configuration" section of the "Sentry 9.8.0 Guide for MobileIron Core" for more information.

Vulnerability Number

V-250998

Documentable

False

Rule Version

MOIS-ND-000690

Severity Override Guidance

Verify the Sentry is configured to send alerts for failure events in Sentry System Manager web GUI.

1. Log in to Sentry.
2. Go to Monitoring >> Alert Configuration.
3. Verify Alert monitoring is configured.

If Alert Configuration settings are not configured, this is a finding.

Refer to the "Alert Configuration" section of the "Sentry 9.8.0 Guide for MobileIron Core" for more information.

Check Content Reference

M

Target Key

5438