Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The IPsec VPN Gateway must use anti-replay mechanisms for security associations.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-97095 | SRG-NET-000147-VPN-000530 | SV-106233r1_rule | Medium |
| Description |
|---|
| Anti-replay is an IPsec security mechanism at a packet level, which helps to avoid unwanted users from intercepting and modifying an ESP packet. |
| STIG | Date |
|---|---|
| Virtual Private Network (VPN) Security Requirements Guide | 2019-07-26 |
Details
| Check Text ( C-95933r1_chk ) |
|---|
| Verify the IPsec VPN Gateway uses anti-replay mechanisms for security associations. If the IPsec VPN Gateway does not use anti-replay mechanisms for security associations, this is a finding. |
| Fix Text (F-102777r1_fix) |
|---|
| Configure the IPsec VPN Gateway to use anti-replay mechanisms for security associations. |