UCF STIG Viewer Logo

The IPsec VPN Gateway must use anti-replay mechanisms for security associations.


Overview

Finding ID Version Rule ID IA Controls Severity
V-207212 SRG-NET-000147-VPN-000530 SV-207212r608988_rule Medium
Description
Anti-replay is an IPsec security mechanism at a packet level, which helps to avoid unwanted users from intercepting and modifying an ESP packet.
STIG Date
Virtual Private Network (VPN) Security Requirements Guide 2021-09-27

Details

Check Text ( C-7472r378257_chk )
Verify the IPsec VPN Gateway uses anti-replay mechanisms for security associations.

If the IPsec VPN Gateway does not use anti-replay mechanisms for security associations, this is a finding.
Fix Text (F-7472r378258_fix)
Configure the IPsec VPN Gateway to use anti-replay mechanisms for security associations.