STIGQter: STIG Summary: Ivanti Connect Secure NDM Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 01 Oct 2025:

The ICS must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable.

DISA Rule

SV-258607r1051115_rule

Vulnerability Number

V-258607

Group Title

SRG-APP-000148-NDM-000346

Rule Version

IVCS-NM-000271

Severity

CAT II

CCI(s)

• CCI-001358 - Establish privileged user accounts in accordance with a role-based access scheme; or an attribute-based access scheme.

Weight

10

Fix Recommendation

In the ICS Web UI, navigate to Authentication >> Auth Servers >> Administrators.
1. Click the tab "Users".
2. Create the emergency local user, or click the default admin user.
3. Click the box for "Enabled".
4. Click the box for "Allow Console Access".
5. Click "Save Changes".

Check Contents

In the ICS Web UI, navigate to Authentication >> Auth Servers >> Administrators.

Click the tab "Users" and verify that more than one user does not exist.

If the ICS is not configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable, this is a finding.

Vulnerability Number

V-258607

Documentable

False

Rule Version

IVCS-NM-000271

Severity Override Guidance

In the ICS Web UI, navigate to Authentication >> Auth Servers >> Administrators.

Click the tab "Users" and verify that more than one user does not exist.

If the ICS is not configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable, this is a finding.

Check Content Reference

M

Target Key

5558