STIGQter: STIG Summary: Ivanti Sentry 9.x NDM Security Technical Implementation Guide Version: 3 Release: 1 Benchmark Date: 24 Oct 2024:

Sentry must be configured to conduct backups of system level information contained in the information system when changes occur.

DISA Rule

SV-251004r1028242_rule

Vulnerability Number

V-251004

Group Title

SRG-APP-000516-NDM-000340

Rule Version

MOIS-ND-000950

Severity

CAT III

CCI(s)

• CCI-000366 - Implement the security configuration settings.
• CCI-000537 - Conduct backups of system-level information contained in the system per organization-defined frequency that is consistent with recovery time and recovery point objectives.

Weight

10

Fix Recommendation

Ensure the virtual solution provides periodic backups.

Refer to "Sentry Installation Guide", section "Periodic backups for VMware", pages 6-7.

Check Contents

Identify/validate Sentry support for periodic backups.

This is done via the virtual machine.

Check with the virtual team to verify backups are scheduled.

If the backups are not scheduled, this is a finding.

Vulnerability Number

V-251004

Documentable

False

Rule Version

MOIS-ND-000950

Severity Override Guidance

Identify/validate Sentry support for periodic backups.

This is done via the virtual machine.

Check with the virtual team to verify backups are scheduled.

If the backups are not scheduled, this is a finding.

Check Content Reference

M

Target Key

5438