When connected via the public Internet, users will be trained to immediately establish a connection to the DoD network via the VPN client.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-19149	SRC-EPT-090	SV-20962r1_rule	ECSC-1	Medium

Description
The DoD architechure is extensive and is designed to protect the enclave and it's endpoints. When a remote user accesses the internet directly, this infrastucture is not leveraged. All connections for Government official business to the Internet via the hotel wireless network will be through the DoD VPN connection only. This requirement should be automatically enforced by an enforcement agent or other technical means on the endpoint.

Description

The DoD architechure is extensive and is designed to protect the enclave and it's endpoints. When a remote user accesses the internet directly, this infrastucture is not leveraged. All connections for Government official business to the Internet via the hotel wireless network will be through the DoD VPN connection only. This requirement should be automatically enforced by an enforcement agent or other technical means on the endpoint.

STIG	Date
Remote Access Policy STIG	2015-09-16

Details

Check Text ( C-22784r1_chk )
Review the user training or security checklist to verify that users are trained on this requirement. If this is automatically enforced, have the IAO demonstrate this feature.

Fix Text (F-19700r1_fix)
Update the user training or security checklist.