ED 21-03, Mitigate Pulse Connect Secure Product Vulnerabilities
RetiredCISA · Emergency Directive · April 20, 2021
Summary
Required agencies to list all Pulse Connect Secure remote access appliances, run the vendor's integrity tool to detect tampering, isolate and report compromised devices, and install vendor fixes within 48 hours of release.
What FedXchange has recorded
No changes recorded. The watch records a new document and any change in its status.
- Issuer
- Cybersecurity and Infrastructure Security Agency (CISA)
- Type
- Emergency Directive
- Number
- ED 21-03
- Issued
- April 20, 2021
- Status
- Retired
Closed by its issuer (CISA's term for a directive that has done its job).
Retired by CISA on January 8, 2026, which found its required actions complete or covered by BOD 22-01.
Get new governance by email
A weekly email on Fridays, an alert on the day the watch finds something new, or both. Free.