STIGQter: STIG Summary: Ivanti Connect Secure NDM Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 01 Oct 2025:

The ICS must be configured to protect against known types of denial-of-service (DoS) attacks by enabling JITC mode.

DISA Rule

SV-268324r1136874_rule

Vulnerability Number

V-268324

Group Title

SRG-APP-000435-NDM-000315

Rule Version

IVCS-NM-000015

Severity

CAT I

CCI(s)

• CCI-002385 - Protect against or limit the effects of organization-defined types of denial of service events.

Weight

10

Fix Recommendation

In the ICS Web UI, navigate to System >> Configuration >> Security >> Inbound SSL Options.
1. Under "DOD Certification Option", check (enabled) "Turn on JITC mode" to enable the JITC mode security features.
2. Once "Turn on JITC mode" is checked, "Turn on NDcPP mode" and "Turn on FIPS mode" are also checked automatically.
3. Click "Save changes" and confirm after the web UI asks for SSL cipher configuration changes.

Check Contents

In the ICS Web UI, navigate to System >> Configuration >> Security >> Inbound SSL Options.
1. Verify "Turn on JITC mode" checkbox is enabled (checked).
2. Verify "Turn on NDcPP mode" checkbox is enabled (checked).

If JITC mode is not enabled, this is a finding.

Vulnerability Number

V-268324

Documentable

False

Rule Version

IVCS-NM-000015

Severity Override Guidance

In the ICS Web UI, navigate to System >> Configuration >> Security >> Inbound SSL Options.
1. Verify "Turn on JITC mode" checkbox is enabled (checked).
2. Verify "Turn on NDcPP mode" checkbox is enabled (checked).

If JITC mode is not enabled, this is a finding.

Check Content Reference

M

Target Key

5558