STIGQter: STIG Summary: Ivanti EPMM Server Security Technical Implementation Guide Version: 3 Release: 1 Benchmark Date: 24 Oct 2024:

The Ivanti EPMM server must initiate a session lock after a 15-minute period of inactivity.

DISA Rule

SV-251401r1004720_rule

Vulnerability Number

V-251401

Group Title

SRG-APP-000003-UEM-000003

Rule Version

IMIC-11-000300

Severity

CAT II

CCI(s)

• CCI-000057 - The information system initiates a session lock after the organization-defined time period of inactivity.

Weight

10

Fix Recommendation

Configure the session timeout with this procedure:

In the Admin Portal, go to Settings >> General >> Timeout.

From the dropdown menu, choose a timeout value of 5, 10, or 15 minutes.

Check Contents

Verify the session timeout is set to 15 minutes or less.

In the Admin Portal, go to Settings >> General >> Timeout. Verify the session timeout is set to 5, 10, or 15.

If the session timeout is not set to 5, 10, or 15, this is a finding.

Vulnerability Number

V-251401

Documentable

False

Rule Version

IMIC-11-000300

Severity Override Guidance

Verify the session timeout is set to 15 minutes or less.

In the Admin Portal, go to Settings >> General >> Timeout. Verify the session timeout is set to 5, 10, or 15.

If the session timeout is not set to 5, 10, or 15, this is a finding.

Check Content Reference

M

Target Key

5445