STIGQter: STIG Summary: Ivanti EPMM Server Security Technical Implementation Guide Version: 3 Release: 1 Benchmark Date: 24 Oct 2024:

The Ivanti EPMM server must limit the number of concurrent sessions per privileged user account to three or less concurrent sessions.

DISA Rule

SV-251400r1004719_rule

Vulnerability Number

V-251400

Group Title

SRG-APP-000001-UEM-000001

Rule Version

IMIC-11-000100

Severity

CAT II

CCI(s)

• CCI-000054 - Limit the number of concurrent sessions for each organization-defined account and/or account type to an organization-defined number.

Weight

10

Fix Recommendation

Use the following procedure to limit the number of concurrent sessions:

In the Admin Portal, go to "Admin" Actions edit Roles "Enforce single session (all spaces)".

Check Contents

Perform the following procedure to limit concurrent sessions per privileged users:

On the Admin page for each privileged user, verify Actions Edit Role select "Enforce single session (all spaces)" is selected.

If "Enforce single session (all spaces)" is not selected for each user, this is a finding.

Vulnerability Number

V-251400

Documentable

False

Rule Version

IMIC-11-000100

Severity Override Guidance

Perform the following procedure to limit concurrent sessions per privileged users:

On the Admin page for each privileged user, verify Actions Edit Role select "Enforce single session (all spaces)" is selected.

If "Enforce single session (all spaces)" is not selected for each user, this is a finding.

Check Content Reference

M

Target Key

5445