The IPsec VPN Gateway must use anti-replay mechanisms for security associations.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-97095	SRG-NET-000147-VPN-000530	SV-106233r1_rule		Medium

Description
Anti-replay is an IPsec security mechanism at a packet level, which helps to avoid unwanted users from intercepting and modifying an ESP packet.

STIG	Date
Virtual Private Network (VPN) Security Requirements Guide	2019-07-26

Details

Check Text ( C-95933r1_chk )
Verify the IPsec VPN Gateway uses anti-replay mechanisms for security associations. If the IPsec VPN Gateway does not use anti-replay mechanisms for security associations, this is a finding.

Fix Text (F-102777r1_fix)
Configure the IPsec VPN Gateway to use anti-replay mechanisms for security associations.