STIGQter: STIG Summary: Virtual Private Network (VPN) Security Requirements Guide Version: 3 Release: 5 Benchmark Date: 01 Jul 2026:

The VPN Gateway must renegotiate the IKE security association (SA) after eight hours or less.

DISA Rule

SV-207238r987783_rule

Vulnerability Number

V-207238

Group Title

SRG-NET-000337

Rule Version

SRG-NET-000337-VPN-001300

Severity

CAT II

CCI(s)

• CCI-002036 - Defines the circumstances or situations under which users will be required to reauthenticate.

Weight

10

Fix Recommendation

Configure the VPN Gateway to renegotiate the IKE security association after eight hours or less.

Check Contents

Verify the VPN Gateway renegotiates the IKE security association after eight hours or less.

If the VPN Gateway does not renegotiate the IKE security association after eight hours or less, this is a finding.

Vulnerability Number

V-207238

Documentable

False

Rule Version

SRG-NET-000337-VPN-001300

Severity Override Guidance

Verify the VPN Gateway renegotiates the IKE security association after eight hours or less.

If the VPN Gateway does not renegotiate the IKE security association after eight hours or less, this is a finding.

Check Content Reference

M

Target Key

2920