The VPN client on mobile devices must use either IPSec or SSL/TLS when connecting to DoD networks.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
WN08-MO-000003	WN08-MO-000003	WN08-MO-000003_rule		Medium

Description
Use of non-standard communications protocols can affect both the availability and confidentiality of communications. IPSec and SSL/TLS are both well-known and tested protocols that provide strong assurance with respect to both IA and interoperability.

STIG	Date
Windows 8 Security Technical Implementation Guide	2012-11-21

Details

Check Text ( C-WN08-MO-000003_chk )
Verify the VPN client on mobile devices is configured to use IPSec or SSL/TLS for connections to DoD networks. If it does not, this is a finding.

Fix Text (F-WN08-MO-000003_fix)
Configure the VPN client on mobile devices to use IPSec or SSL/TLS when connecting to DoD networks.