The VPN client on mobile devices must use either IPSec or SSL/TLS when connecting to DoD networks.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-36754	WN08-MO-000003	SV-48428r1_rule	ECWN-1	Medium

Description
Use of non-standard communications protocols can affect both the availability and confidentiality of communications. IPSec and SSL/TLS are both well-known and tested protocols that provide strong assurance with respect to both IA and interoperability.

STIG	Date
Windows 8 Security Technical Implementation Guide	2014-01-07

Details

Check Text ( C-45097r1_chk )
Verify the VPN client on mobile devices is configured to use IPSec or SSL/TLS for connections to DoD networks. If it does not, this is a finding. Procedures will vary depending on the VPN client used.

Fix Text (F-41559r1_fix)
Configure the VPN client on mobile devices to use IPSec or SSL/TLS when connecting to DoD networks. Procedures will vary depending on the VPN client used.