STIGQter: STIG Summary: Citrix Virtual Apps and Desktop 7.x StoreFront Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Jan 2021:

The Citrix Storefront server must implement DoD-approved encryption to protect the confidentiality of remote access sessions.

DISA Rule

SV-234251r628797_rule

Vulnerability Number

V-234251

Group Title

SRG-APP-000014

Rule Version

CVAD-SF-000030

Severity

CAT I

CCI(s)

CCI-000068 - The information system implements cryptographic mechanisms to protect the confidentiality of remote access sessions.

Weight

Fix Recommendation

Implement a DoD approved VPN, or gateway/proxy, that will authenticate user access and tunnel/proxy traffic to StoreFront. Ensure the VPN, or gateway/proxy, is configured to authenticate the user before accessing the environment, and meets the DoD encryption requirements, such as FIPS 140-2, for the environment.

Check Contents

A DoD approved VPN, or gateway/proxy, must be leveraged to access StoreFront from a remote network. This VPN, or gateway, must handle user authentication and tunneling of StoreFront traffic. The VPN, or gateway, must meet the DoD encryption requirements, such as FIPS 140-2, for the environment.

If no VPN, or gateway/proxy, is used for remote access to StoreFront, this is a finding.
If the VPN, or gateway/proxy, does not authenticate the remote user before providing access to StoreFront, this is a finding.
If the VPN, or gateway/proxy, fails to meet the DoD encryption requirements for the environment, this is a finding.

The Citrix Storefront server must implement DoD-approved encryption to protect the confidentiality of remote access sessions.

DISA Rule

Vulnerability Number

Group Title

Rule Version

Severity

CCI(s)

Weight

Fix Recommendation

Check Contents

Vulnerability Number

Documentable

Rule Version

Severity Override Guidance

Check Content Reference

Target Key

Comments