Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-19899 | WIR-MOS-WP-034-04 | SV-40033r1_rule | ECWN-1 | Medium |
Description |
---|
DoD data could be compromised if transmitted data is not secured with a compliant VPN. Split tunneling could allow connections from non-secure Internet sites to access data on the DoD network. |
STIG | Date |
---|---|
Windows Phone 6.5 (with Good Mobility Suite) Security Technical Implementation Guide | 2011-10-04 |
Check Text ( C-39049r1_chk ) |
---|
This check is not applicable if the installed VPN client is not used for remote access to DoD networks. Interview the IAO and/or site wireless device administrator and inspect a sample (3-4) of site devices. Check to see if the VPN has a setting to disable split tunneling. Verify split tunneling has been disabled. Mark not applicable if the VPN is not used for remote access to a DoD network |
Fix Text (F-20573r2_fix) |
---|
Comply with policy requirement. |