STIGQter: STIG Summary: Ivanti Connect Secure VPN Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 01 Oct 2025:

The ICS must be configured to limit the number of concurrent sessions for user accounts to one.

DISA Rule

SV-258585r997504_rule

Vulnerability Number

V-258585

Group Title

SRG-NET-000053-VPN-000170

Rule Version

IVCS-VN-000050

Severity

CAT II

CCI(s)

CCI-000054 - Limit the number of concurrent sessions for each organization-defined account and/or account type to an organization-defined number.
CCI-004866 - Employ organization-defined controls by type of denial-of-service to achieve the denial-of-service objective.

Weight

Fix Recommendation

In the ICS Web UI, navigate to Users >> User Realms >> User Realms.
1. If using the default user realm, click "User". Otherwise, click the configured user realm that will be used for user remote access VPN using DOD CAC authentication.
2. Click the "Authentication Policy" tab, then click "Limits".
3. In "Maximum number of sessions per user", type the number "1".
4. Click "Save Changes".

Check Contents

In the ICS Web UI, navigate to Users >> User Realms >> User Realms.
1. If using the default user realm, click "User". Otherwise, click the configured user realm that will be used for user remote access VPN using DOD CAC authentication.
2. Click the "Authentication Policy" tab, then click "Limits".

If the ICS does not limit the number of concurrent sessions for user accounts to "1", this is a finding.

Vulnerability Number

V-258585

Documentable

False

Rule Version

IVCS-VN-000050

Severity Override Guidance

In the ICS Web UI, navigate to Users >> User Realms >> User Realms.
1. If using the default user realm, click "User". Otherwise, click the configured user realm that will be used for user remote access VPN using DOD CAC authentication.
2. Click the "Authentication Policy" tab, then click "Limits".

If the ICS does not limit the number of concurrent sessions for user accounts to "1", this is a finding.

Check Content Reference

Target Key

5559