STIGQter: STIG Summary: Ivanti EPMM Server Security Technical Implementation Guide Version: 3 Release: 1 Benchmark Date: 24 Oct 2024:

The Ivanti EPMM server must alert the ISSO and SA (at a minimum) in the event of an audit processing failure.

DISA Rule

SV-251404r1004725_rule

Vulnerability Number

V-251404

Group Title

SRG-APP-000108-UEM-000062

Rule Version

IMIC-11-003000

Severity

CAT II

CCI(s)

• CCI-000139 - Alert organization-defined personnel or roles within an organization-defined time period in the event of an audit logging process failure.

Weight

10

Fix Recommendation

Configure Core to alert the ISSO and SA in the event of an audit processing failure:

Logs >> Event Settings >> Add New System Event >> ensure System Storage Threshold has been reached is checked.

Check Contents

Verify Core is configured to alert the ISSO and SA in the event of an audit processing failure:

In the Core console, go to Logs >> Event Settings >> Add New System Event.

Verify System Storage Threshold has been reached is checked.

If System Storage Threshold has been reached is not checked, this is a finding.

Vulnerability Number

V-251404

Documentable

False

Rule Version

IMIC-11-003000

Severity Override Guidance

Verify Core is configured to alert the ISSO and SA in the event of an audit processing failure:

In the Core console, go to Logs >> Event Settings >> Add New System Event.

Verify System Storage Threshold has been reached is checked.

If System Storage Threshold has been reached is not checked, this is a finding.

Check Content Reference

M

Target Key

5445