The Ivanti Policy Secure must be configured to use a unique shared secret for RADIUS clients requesting authentication services.

Using standardized authentication protocols such as RADIUS, TACACS+, and Kerberos provides centralized and robust authentication services for the management of network components. An authentication server is very scalable as it supports many user accounts and authentication sessions with the network components.

1. In the Web UI, navigate to Endpoint Policy >> Radius Client. 2. Review the configuration for each RADIUS Client. 3. Verify "Shared Secret" is set as a required field.

If "Shared Secret" is not set for all defined RADIUS Clients, this is a finding.

1. In the Web UI, navigate to Endpoint Policy >> Radius Client. 2. Enter "Shared Secret" for each defined RADIUS client.