← Back to Ivanti Policy Secure AAA Services Security Technical Implementation Guide

V-284442

CAT II (Medium)

The Ivanti Policy Secure must be configured to use a unique shared secret for RADIUS clients requesting authentication services.

Rule ID

SV-284442r1244818_rule

STIG

Ivanti Policy Secure AAA Services Security Technical Implementation Guide

Version

V1R1

CCIs

CCI-000366

Discussion

Using standardized authentication protocols such as RADIUS, TACACS+, and Kerberos provides centralized and robust authentication services for the management of network components. An authentication server is very scalable as it supports many user accounts and authentication sessions with the network components.

Check Content

1. In the Web UI, navigate to Endpoint Policy >> Radius Client.
2. Review the configuration for each RADIUS Client. 
3. Verify "Shared Secret" is set as a required field.

If "Shared Secret" is not set for all defined RADIUS Clients, this is a finding.

Fix Text

1. In the Web UI, navigate to Endpoint Policy >> Radius Client.
2. Enter "Shared Secret" for each defined RADIUS client.