STIGQter: STIG Summary: Ivanti Connect Secure NDM Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 01 Oct 2025:

The ICS must be configured to support organizational requirements to conduct weekly backups of information system documentation, including security-related documentation.

DISA Rule

SV-258612r961863_rule

Vulnerability Number

V-258612

Group Title

SRG-APP-000516-NDM-000341

Rule Version

IVCS-NM-000380

Severity

CAT II

CCI(s)

• CCI-000366 - Implement the security configuration settings.
• CCI-000539 - Conduct backups of system documentation, including security-related documentation, per an organization-defined frequency that is consistent with recovery time and recovery point objectives.

Weight

10

Fix Recommendation

In the ICS Web UI, navigate to Maintenance >> Archiving >> Archive Servers.
1. Click "SCP" if using an SFTP/SCP server; other mechanisms may not be allowed due to local security policy. NOTE: Check with the ISSM before configuring anything other than SCP.
2. Under "Archive Server" type the hostname or IPv4/IPv6 address.
3. In "Destination Directory" type the path of the backup (e.g., "/backupfolder/ics/").
4. In the "Username" field, type the username with SCP/SFTP permissions on the backup server.
5. In the "Password" field, type the password.
6. Under "Archive Schedule", select "Archive System Configuration", then click the day of the week and time when the backup should be sent.
7. Under "Archive System Configuration", ensure a password is given to encrypt the backup.
8. Under "Archive Schedule", select "Archive User Accounts", then click the day of the week and time when the backup should be sent.
9. Under "Archive User Accounts", ensure a password is given to encrypt the backup.
10. Click "Save Changes".

Check Contents

In the ICS Web UI, navigate to Maintenance >> Archiving >> Archive Servers.
1. Under "Archive Settings" verify an archive server is configured.
2. Under "Archive Schedule" verify "Archive System Configuration", and "Archive User Accounts" are selected.
3. Under "Archive Schedule" verify "Archive System Configuration", and "Archive User Accounts" are configured at a specific time and day of the week.
4. Under "Archive Schedule", if "Archive System Configuration", and "Archive User Accounts" are configured with a password for backup encryption.

If the ICS does not support organizational requirements to conduct backups of information system documentation, including security-related documentation weekly, this is a finding.

Vulnerability Number

V-258612

Documentable

False

Rule Version

IVCS-NM-000380

Severity Override Guidance

In the ICS Web UI, navigate to Maintenance >> Archiving >> Archive Servers.
1. Under "Archive Settings" verify an archive server is configured.
2. Under "Archive Schedule" verify "Archive System Configuration", and "Archive User Accounts" are selected.
3. Under "Archive Schedule" verify "Archive System Configuration", and "Archive User Accounts" are configured at a specific time and day of the week.
4. Under "Archive Schedule", if "Archive System Configuration", and "Archive User Accounts" are configured with a password for backup encryption.

If the ICS does not support organizational requirements to conduct backups of information system documentation, including security-related documentation weekly, this is a finding.

Check Content Reference

M

Target Key

5558