STIGQter: STIG Summary: Ivanti Connect Secure NDM Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 01 Oct 2025:

The ICS must be configured to allocate local audit record storage capacity in accordance with organization-defined audit record storage requirements.

DISA Rule

SV-258605r961392_rule

Vulnerability Number

V-258605

Group Title

SRG-APP-000357-NDM-000293

Rule Version

IVCS-NM-000150

Severity

CAT II

CCI(s)

• CCI-001849 - Allocate audit log storage capacity to accommodate organization-defined audit record retention requirements.

Weight

10

Fix Recommendation

In the ICS Web UI, navigate to System >> Log Monitoring >> User Access >> Settings.

Go to "Minimum Log Size", set the Max Log Size to the value required by the site. By default, it is set to 200MB.

Check Contents

In the ICS Web UI, navigate to System >> Log Monitoring >> User Access >> Settings.

Under the "Minimum Log Size", verify the Max Log Size is equal to or greater than the site's required limit as documented in the SSP (the default is 200 MB).

If the ICS is not configured with a Max Log Size that is equal to or greater than the site's required limit, this is a finding.

Vulnerability Number

V-258605

Documentable

False

Rule Version

IVCS-NM-000150

Severity Override Guidance

In the ICS Web UI, navigate to System >> Log Monitoring >> User Access >> Settings.

Under the "Minimum Log Size", verify the Max Log Size is equal to or greater than the site's required limit as documented in the SSP (the default is 200 MB).

If the ICS is not configured with a Max Log Size that is equal to or greater than the site's required limit, this is a finding.

Check Content Reference

M

Target Key

5558