Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-36754 | WN08-MO-000003 | SV-48428r1_rule | ECWN-1 | Medium |
Description |
---|
Use of non-standard communications protocols can affect both the availability and confidentiality of communications. IPSec and SSL/TLS are both well-known and tested protocols that provide strong assurance with respect to both IA and interoperability. |
STIG | Date |
---|---|
Windows 8 Security Technical Implementation Guide | 2014-01-07 |
Check Text ( C-45097r1_chk ) |
---|
Verify the VPN client on mobile devices is configured to use IPSec or SSL/TLS for connections to DoD networks. If it does not, this is a finding. Procedures will vary depending on the VPN client used. |
Fix Text (F-41559r1_fix) |
---|
Configure the VPN client on mobile devices to use IPSec or SSL/TLS when connecting to DoD networks. Procedures will vary depending on the VPN client used. |