← Back to Ivanti Policy Secure NDM Security Technical Implementation Guide

V-284547

CAT I (High)

The Ivanti Policy Secure must be configured to use a version supported by the vendor.

Rule ID

SV-284547r1244960_rule

STIG

Ivanti Policy Secure NDM Security Technical Implementation Guide

Version

V1R1

CCIs

CCI-003376

Discussion

Unsupported software and systems should not be used because fixes to newly identified bugs will not be implemented by the vendor. The lack of support can result in potential vulnerabilities. Software and systems at unsupported servicing levels or releases will not receive security updates for new vulnerabilities, which leaves them subject to exploitation. When maintenance updates and patches are no longer available, software is no longer considered supported and should be upgraded or decommissioned.

Check Content

Check the software version installed against the vendor supported version.

1. Navigate to the System Status page from other admin console pages by selecting System >> Status.
2. Click the "System Version Download Package" link to download the software version running on the system.

If the software version is not a version supported by the vendor, this is a finding.

Fix Text

Upgrade the system software to a vendor supported version.

1. Select Maintenance >> System >> Upgrade/Downgrade to display the system software maintenance page.
2. Under "Install Service Package", select one of the following options to proceed:
a. From "File", use the "Browse" button to locate and select the service package file.
b. From "Staged Package", select the service package file that was previously uploaded.
Note: Do not select the "Deletes" option when upgrading software. This option is available to support downgrading software.
3. Click "Install".