All wireless PDA and smartphone client VPNs must have split tunneling disabled.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-19899	WIR-MOS-AND-034-04	SV-35007r1_rule	ECWN-1	Medium

Description
DoD data could be compromised if transmitted data is not secured with a compliant VPN.

STIG	Date
Android 2.2 (Dell) Security Technical Implementation Guide	2011-11-28

Details

Check Text ( C-34883r1_chk )
This check is not applicable if the installed VPN client is not used for remote access to DoD networks. Interview the IAO and/or site wireless device administrator and inspect a sample (3-4) of site devices. Check to see if the VPN has a setting to disable split tunneling. Verify split tunneling has been disabled. Mark not applicable if the VPN is not used for remote access to a DoD network.

Fix Text (F-30400r1_fix)
Use only VPN clients supporting the capability to disable split-tunneling.