STIGQter: STIG Summary: Ivanti Sentry 9.x ALG Security Technical Implementation Guide Version: 3 Release: 1 Benchmark Date: 24 Oct 2024:

The Sentry must implement load balancing to limit the effects of known and unknown types of Denial-of-Service (DoS) attacks.

DISA Rule

SV-251033r1028199_rule

Vulnerability Number

V-251033

Group Title

SRG-NET-000362-ALG-000120

Rule Version

MOIS-AL-000970

Severity

CAT III

CCI(s)

• CCI-002385 - Protect against or limit the effects of organization-defined types of denial of service events.

Weight

10

Fix Recommendation

Configure the Sentry to be implemented behind a load balancer to limit the effects of known and unknown types of DoS attacks.

Check Contents

Verify the Sentry is implemented behind a load balancer to limit the effects of known and unknown types of DoS attacks.

If the device is not implemented behind a load balancer to limit the effects of known and unknown types of DoS attacks, this is a finding.

Vulnerability Number

V-251033

Documentable

False

Rule Version

MOIS-AL-000970

Severity Override Guidance

Verify the Sentry is implemented behind a load balancer to limit the effects of known and unknown types of DoS attacks.

If the device is not implemented behind a load balancer to limit the effects of known and unknown types of DoS attacks, this is a finding.

Check Content Reference

M

Target Key

5439