What changed in Cisco ISE NAC STIG V2R4V2R4 changes

Cisco ISE NAC STIG V2R4 (2026-07-01) replaced V2R3 (2026-01-05): 1 check updated. It has 30 checks, against 30 in V2R3.

V2R4 checklistV2R3 checklist Compare V2R3 and V2R4 in STIG Compare

  • 0 added
  • 0 removed
  • 1 updated

Updated fields: Check text 1Fix text 1

Updated in V2R4 (1)

V-242599CAT IIThe Cisco ISE must perform continuous detection and tracking of endpoint devices attached to the network. This is required for compliance with C2C Step 1.Check text, Fix text

Check text

If DoDDOD is not at C2C Step 1 or higher, this is not a finding. If not required by the NAC SSP, this is not a finding. Review the posture settings to ensureverify the Continuous Monitoring Interval is enabled and a value is configured. From the Web Admin portal: 1. Choose Work Centers >> Posture >> Settings >> Posture General Settings. 2. Verify that "Continuous Monitoring Interval" is enabled and an interval is configured. Note: For versions after version 3.1, it may be necessary to navigate to Administration >> System >> Settings >> Posture >> General Settings to access this setting. If "Continuous Monitoring Interval" is not enabled with an interval defined, this is a finding.

Fix text

If required by the NAC SSP, configure the posture settings to enable the Continuous Monitoring Interval. From the Web Admin portal: 1. Choose Work Centers >> Posture >> Settings >> Posture General Settings. 2. Check "Continuous Monitoring Interval" and define an interval to enable continuous monitoring. 3. Choose "Save". Note: For versions after version 3.1, it may be necessary to navigate to Administration >> System >> Settings >> Posture >> General Settings to access this setting.

V-242599 in V2R4

How these changes are found

Checks are matched across the two releases by V-number. A check counts as updated when DISA gave it a new rule revision (the r number in its SV-…_rule id) and its title, severity, check text, fix text, discussion, CCIs or other fields changed — the same comparison STIG Compare makes. Added checks are new V-numbers; removed checks are V-numbers V2R4 no longer has.

Comparing other releases, or this one against an older release? Pick any two in STIG Compare.