The Ivanti Policy Secure must be configured to use a version supported by the vendor.

Unsupported software and systems should not be used because fixes to newly identified bugs will not be implemented by the vendor. The lack of support can result in potential vulnerabilities.

Software and systems at unsupported servicing levels or releases will not receive security updates for new vulnerabilities, which leaves them subject to exploitation.

When maintenance updates and patches are no longer available, software is no longer considered supported and should be upgraded or decommissioned.

Check the software version installed against the vendor supported version.

1. Navigate to the System Status page from other admin console pages by selecting System >> Status. 2. Click the "System Version Download Package" link to download the software version running on the system.

If the software version is not a version supported by the vendor, this is a finding.

Upgrade the system software to a vendor supported version.

1. Select Maintenance >> System >> Upgrade/Downgrade to display the system software maintenance page. 2. Under "Install Service Package", select one of the following options to proceed: a. From "File", use the "Browse" button to locate and select the service package file. b. From "Staged Package", select the service package file that was previously uploaded. Note: Do not select the "Deletes" option when upgrading software. This option is available to support downgrading software. 3. Click "Install".