STIGQter STIGQter: STIG Summary: Ivanti Connect Secure NDM Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 01 Oct 2025:

The ICS must be configured to terminate after five minutes of inactivity except to fulfill documented and validated mission requirements.

DISA Rule

SV-258608r1136931_rule

Vulnerability Number

V-258608

Group Title

SRG-APP-000190-NDM-000267

Rule Version

IVCS-NM-000300

Severity

CAT I

CCI(s)

Weight

10

Fix Recommendation

In the ICS Web UI, navigate to Administrators >> Admins Role >> Delegated Admin Roles.

1. Click the configured admin role being used for CAC/PKI token admin logins. By default it is Administrators.
2. Click the Session Options tab.
3. In the "Session Lifetime" section, set the Idle Timeout to "5".
4. Click "Save Changes".

Check Contents

In the ICS Web UI, navigate to Administrators >> Admins Role >> Delegated Admin Roles.
1. Click the configured admin role being used for CAC/PKI token admin logins (by default it is .Administrators).
2. Click the Session Options tab.
3. In the "Session Lifetime" section, verify the Idle Timeout is set to "5".

If the ICS does not terminate after 10 minutes of inactivity except to fulfill documented and validated mission requirements, this is a finding.

Vulnerability Number

V-258608

Documentable

False

Rule Version

IVCS-NM-000300

Severity Override Guidance

In the ICS Web UI, navigate to Administrators >> Admins Role >> Delegated Admin Roles.
1. Click the configured admin role being used for CAC/PKI token admin logins (by default it is .Administrators).
2. Click the Session Options tab.
3. In the "Session Lifetime" section, verify the Idle Timeout is set to "5".

If the ICS does not terminate after 10 minutes of inactivity except to fulfill documented and validated mission requirements, this is a finding.

Check Content Reference

M

Target Key

5558