STIGQter: STIG Summary: Ivanti EPMM Server Security Technical Implementation Guide Version: 3 Release: 1 Benchmark Date: 24 Oct 2024:

The Ivanti EPMM server must configure web management tools with FIPS-validated Advanced Encryption Standard (AES) cipher block algorithm to protect the confidentiality of maintenance and diagnostic communications for nonlocal maintenance sessions.

DISA Rule

SV-251416r1004743_rule

Vulnerability Number

V-251416

Group Title

SRG-APP-000412-UEM-000283

Rule Version

IMIC-11-010000

Severity

CAT I

CCI(s)

CCI-003123 - Implement organization-defined cryptographic mechanisms to protect the confidentiality of nonlocal maintenance and diagnostic communications.

Weight

Fix Recommendation

Configure Core to be in FIPS mode.

ssh to command line console of the Core. Enable >> show fips. Configure fips >> reload.

Check Contents

Verify MobileIron Core is in FIPS mode.

ssh to command line console of the Core. Enable >> show fips. Verify FIPS mode is configured.

If FIPS mode is not configured, this is a finding.

Vulnerability Number

V-251416

Documentable

False

Rule Version

IMIC-11-010000

Severity Override Guidance

Verify MobileIron Core is in FIPS mode.

ssh to command line console of the Core. Enable >> show fips. Verify FIPS mode is configured.

If FIPS mode is not configured, this is a finding.

Check Content Reference

Target Key

5445