STIGQter: STIG Summary: Virtual Private Network (VPN) Security Requirements Guide Version: 2 Release: 3 Benchmark Date: 23 Apr 2021:

The VPN Gateway must renegotiate the security association after 24 hours or less or as defined by the organization.

DISA Rule

SV-207238r608988_rule

Vulnerability Number

V-207238

Group Title

SRG-NET-000337

Rule Version

SRG-NET-000337-VPN-001300

Severity

CAT II

CCI(s)

• CCI-002038 - The organization requires users to reauthenticate upon organization-defined circumstances or situations requiring reauthentication.

Weight

10

Fix Recommendation

Configure the VPN Gateway to renegotiate the security association after 24 hours or less or as defined by the organization.

Check Contents

Verify the VPN Gateway renegotiates the security association after 24 hours or less or as defined by the organization.

If the VPN Gateway does not renegotiate the security association after 24 hours or less or as defined by the organization, this is a finding.

Vulnerability Number

V-207238

Documentable

False

Rule Version

SRG-NET-000337-VPN-001300

Severity Override Guidance

Verify the VPN Gateway renegotiates the security association after 24 hours or less or as defined by the organization.

If the VPN Gateway does not renegotiate the security association after 24 hours or less or as defined by the organization, this is a finding.

Check Content Reference

M

Target Key

2920

Comments