STIGQter: STIG Summary: Virtual Private Network (VPN) Security Requirements Guide Version: 2 Release: 3 Benchmark Date: 23 Apr 2021:

The VPN Gateway must be configured to route sessions to an IDPS for inspection.

DISA Rule

SV-207220r608988_rule

Vulnerability Number

V-207220

Group Title

SRG-NET-000205

Rule Version

SRG-NET-000205-VPN-000710

Severity

CAT II

CCI(s)

• CCI-001097 - The information system monitors and controls communications at the external boundary of the information system and at key internal boundaries within the system.

Weight

10

Fix Recommendation

Configure the VPN Gateway to route sessions to an IDPS for inspection.

Check Contents

Verify the VPN Gateway routes sessions to an IDPS for inspection.

If the VPN Gateway is not configured to route sessions to an IDPS for inspection, this is a finding.

Vulnerability Number

V-207220

Documentable

False

Rule Version

SRG-NET-000205-VPN-000710

Severity Override Guidance

Verify the VPN Gateway routes sessions to an IDPS for inspection.

If the VPN Gateway is not configured to route sessions to an IDPS for inspection, this is a finding.

Check Content Reference

M

Target Key

2920

Comments