STIGQter: STIG Summary: Ivanti Connect Secure VPN Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 01 Oct 2025:

The ICS must be configured to disable split-tunneling for remote client VPNs.

DISA Rule

SV-258596r1005432_rule

Vulnerability Number

V-258596

Group Title

SRG-NET-000369-VPN-001620

Rule Version

IVCS-VN-000360

Severity

CAT II

CCI(s)

CCI-002397 - Prevent split tunneling for remote devices connecting to organizational systems unless the split tunnel is securely provisioned using organization-defined safeguards.

Weight

Fix Recommendation

In the ICS Web UI, navigate to Users >> Resource Policies >> Split Tunneling Networks.
1. If there are any split-tunnel network policies configured, select all of them and delete them.
2. If the split tunneling policies are needed for debugging or testing only, ensure the role being applied is only for the debugging or test group.

Check Contents

In the ICS Web UI, navigate to Users >> Resource Policies >> Split Tunneling Networks.

If there are any split-tunnel network policies, this is a finding.

Vulnerability Number

V-258596

Documentable

False

Rule Version

IVCS-VN-000360

Severity Override Guidance

In the ICS Web UI, navigate to Users >> Resource Policies >> Split Tunneling Networks.

If there are any split-tunnel network policies, this is a finding.

Check Content Reference

Target Key

5559