STIGQter: STIG Summary: Ivanti Connect Secure NDM Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 01 Oct 2025:

The ICS must be configured to conduct backups of system level information contained in the information system when changes occur.

DISA Rule

SV-258625r961863_rule

Vulnerability Number

V-258625

Group Title

SRG-APP-000516-NDM-000340

Rule Version

IVCS-NM-000740

Severity

CAT II

CCI(s)

• CCI-000366 - Implement the security configuration settings.
• CCI-000537 - Conduct backups of system-level information contained in the system per organization-defined frequency that is consistent with recovery time and recovery point objectives.

Weight

10

Fix Recommendation

In the ICS Web UI, navigate to Maintenance >> Archiving >> Archive Servers.
1. Click "SCP" if using an SFTP/SCP server, other mechanisms may not be allowed due to local security policy. Check with the ISSM before configuring anything other than SCP.
2. Under "Archive Server", type the hostname or IPv4/IPv6 address.
3. In "Destination Directory" type the path of the backup (e.g., "/backupfolder/ics/").
4. In the "Username" field, type the username with SCP/SFTP permissions on the backup server.
5. In the "Password" field, type the password.
6. Under "Archive Schedule", select "Archive System Configuration", then click the day of the week and time when the backup should be sent.
7. Under "Archive System Configuration", ensure a password is given to encrypt the backup.
8. Under "Archive Schedule", select "Archive User Accounts", then click the day of the week and time when the backup should be sent.
9. Under "Archive User Accounts", ensure a password is given to encrypt the backup.
10. Click "Save Changes".

Check Contents

In the ICS Web UI, navigate to Maintenance >> Archiving >> Archive Servers.

Under "Archive Settings", if there is no archive server configured, this is a finding.

Under "Archive Schedule", if "Archive System Configuration", and "Archive User Accounts" are not selected, this is a finding.

Under "Archive Schedule", if "Archive System Configuration", and "Archive User Accounts" are not configured at a specific time and day of the week, this is a finding.

Under "Archive Schedule", if "Archive System Configuration", and "Archive User Accounts" are not configured with a password for backup encryption, this is a finding.

Vulnerability Number

V-258625

Documentable

False

Rule Version

IVCS-NM-000740

Severity Override Guidance

In the ICS Web UI, navigate to Maintenance >> Archiving >> Archive Servers.

Under "Archive Settings", if there is no archive server configured, this is a finding.

Under "Archive Schedule", if "Archive System Configuration", and "Archive User Accounts" are not selected, this is a finding.

Under "Archive Schedule", if "Archive System Configuration", and "Archive User Accounts" are not configured at a specific time and day of the week, this is a finding.

Under "Archive Schedule", if "Archive System Configuration", and "Archive User Accounts" are not configured with a password for backup encryption, this is a finding.

Check Content Reference

M

Target Key

5558