What changed in Cisco ISE NDM STIG V2R4V2R4 changes

Cisco ISE NDM STIG V2R4 (2026-07-01) replaced V2R3 (2026-01-05): 2 checks removed. It has 51 checks, against 53 in V2R3.

V2R4 checklistV2R3 checklist Compare V2R3 and V2R4 in STIG Compare

  • 0 added
  • 2 removed
  • 0 updated

Removed since V2R3 (2)

  • V-242644CAT IIThe Cisco ISE must authenticate Network Time Protocol (NTP) sources using authentication that is cryptographically based.
  • V-242652CAT IIThe Cisco ISE must prohibit the use of cached authenticators after an organization-defined time period.

How these changes are found

Checks are matched across the two releases by V-number. A check counts as updated when DISA gave it a new rule revision (the r number in its SV-…_rule id) and its title, severity, check text, fix text, discussion, CCIs or other fields changed — the same comparison STIG Compare makes. Added checks are new V-numbers; removed checks are V-numbers V2R4 no longer has.

Comparing other releases, or this one against an older release? Pick any two in STIG Compare.