Sentry must be configured to conduct backups of system level information contained in the information system when changes occur.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-251004 | MOIS-ND-000950 | SV-251004r1028242_rule | CCI-000366 | low |
| Description | ||||
| This control requires the network device to support the organizational central backup process for system-level information associated with the network device. This function may be provided by the network device itself; however, the preferred best practice is a centralized backup rather than each network device performing discrete backups. | ||||
| STIG | Date | |||
| Ivanti Sentry 9.x NDM Security Technical Implementation Guide | 2024-09-25 | |||
Related Frameworks
4 paths across 3 frameworks
Related Frameworks
NIST 800-531 mapping
CM-6
1.00
- DISA · V3R1 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
NIST 800-1712 mappings
3.4.1
1.00
- DISA · V3R1 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
3.4.2
1.00
- DISA · V3R1 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
CCI1 mapping
CCI-000366
1.00
- DISA · V3R1 · disa_xccdf · related
Details
Check Text (C-251004r1028242_chk)
Identify/validate Sentry support for periodic backups.
This is done via the virtual machine.
Check with the virtual team to verify backups are scheduled.
If the backups are not scheduled, this is a finding.
Fix Text (F-54393r1004886_fix)
Ensure the virtual solution provides periodic backups.
Refer to "Sentry Installation Guide", section "Periodic backups for VMware", pages 6-7.