STIGQter: STIG Summary: Virtual Private Network (VPN) Security Requirements Guide Version: 2 Release: 3 Benchmark Date: 23 Apr 2021:

The Remote Access VPN Gateway must be configured to prohibit Point-to-Point Tunneling Protocol (PPTP) and L2F.

DISA Rule

SV-207206r608988_rule

Vulnerability Number

V-207206

Group Title

SRG-NET-000132

Rule Version

SRG-NET-000132-VPN-000470

Severity

CAT II

CCI(s)

• CCI-000382 - The organization configures the information system to prohibit or restrict the use of organization-defined functions, ports, protocols, and/or services.

Weight

10

Fix Recommendation

Configure the VPN Gateway to prohibit PPTP and L2F.

Check Contents

Verify the VPN Gateway is configured to prohibit PPTP and L2F.

If the VPN Gateway does not be configured to prohibit PPTP and L2F, this is a finding.

Vulnerability Number

V-207206

Documentable

False

Rule Version

SRG-NET-000132-VPN-000470

Severity Override Guidance

Verify the VPN Gateway is configured to prohibit PPTP and L2F.

If the VPN Gateway does not be configured to prohibit PPTP and L2F, this is a finding.

Check Content Reference

M

Target Key

2920

Comments