STIGQter: STIG Summary: Virtual Private Network (VPN) Security Requirements Guide Version: 2 Release: 3 Benchmark Date: 23 Apr 2021:

The VPN Gateway must terminate all network connections associated with a communications session at the end of the session.

DISA Rule

SV-207221r608988_rule

Vulnerability Number

V-207221

Group Title

SRG-NET-000213

Rule Version

SRG-NET-000213-VPN-000720

Severity

CAT III

CCI(s)

• CCI-001133 - The information system terminates the network connection associated with a communications session at the end of the session or after an organization-defined time period of inactivity.

Weight

10

Fix Recommendation

Configure the VPN Gateway to terminate all network connections associated with a communications session at the end of the session.

Check Contents

Verify the VPN Gateway terminates all network connections associated with a communications session at the end of the session.

If the VPN Gateway does not terminate all network connections associated with a communications session at the end of the session, this is a finding.

Vulnerability Number

V-207221

Documentable

False

Rule Version

SRG-NET-000213-VPN-000720

Severity Override Guidance

Verify the VPN Gateway terminates all network connections associated with a communications session at the end of the session.

If the VPN Gateway does not terminate all network connections associated with a communications session at the end of the session, this is a finding.

Check Content Reference

M

Target Key

2920

Comments