STIGQter STIGQter: STIG Summary: Ivanti EPMM Server Security Technical Implementation Guide Version: 3 Release: 1 Benchmark Date: 24 Oct 2024:

The Ivanti EPMM server must automatically terminate a user session after an organization-defined period of user inactivity.

DISA Rule

SV-251414r1004735_rule

Vulnerability Number

V-251414

Group Title

SRG-APP-000295-UEM-000169

Rule Version

IMIC-11-007900

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Configure the MDM server or platform to lock the server after 15 minutes of inactivity.

In the Admin Portal, go to Settings >> General >> Timeout.

From the dropdown menu, choose a timeout value of 5, 10, or 15 minutes.

Check Contents

Review the MDM server or platform configuration and verify the server is configured to lock after 15 minutes of inactivity.

If, in the Admin Portal, Settings >> General >> Timeout is not set to 15 minutes or less, this is a finding.

The current value for the session timeout will be displayed in minutes.

Vulnerability Number

V-251414

Documentable

False

Rule Version

IMIC-11-007900

Severity Override Guidance

Review the MDM server or platform configuration and verify the server is configured to lock after 15 minutes of inactivity.

If, in the Admin Portal, Settings >> General >> Timeout is not set to 15 minutes or less, this is a finding.

The current value for the session timeout will be displayed in minutes.

Check Content Reference

M

Target Key

5445