STIGQter: STIG Summary: Virtual Private Network (VPN) Security Requirements Guide Version: 3 Release: 5 Benchmark Date: 01 Jul 2026:

The VPN Gateway must employ organization-defined controls by type of denial of service (DoS) to achieve the DoS objective.

DISA Rule

SV-264328r984313_rule

Vulnerability Number

V-264328

Group Title

SRG-NET-000705

Rule Version

SRG-NET-000705-VPN-000110

Severity

CAT II

CCI(s)

• CCI-004866 - Employ organization-defined controls by type of denial-of-service to achieve the denial-of-service objective.

Weight

10

Fix Recommendation

Configure the VPN Gateway to employ organization-defined controls by type of DoS to achieve the DoS objective.

Check Contents

Verify the VPN Gateway is configured to employ organization-defined controls by type of DoS to achieve the DoS objective.

If the VPN Gateway is not configured to employ organization-defined controls by type of DoS to achieve the DoS objective, this is a finding.

Vulnerability Number

V-264328

Documentable

False

Rule Version

SRG-NET-000705-VPN-000110

Severity Override Guidance

Verify the VPN Gateway is configured to employ organization-defined controls by type of DoS to achieve the DoS objective.

If the VPN Gateway is not configured to employ organization-defined controls by type of DoS to achieve the DoS objective, this is a finding.

Check Content Reference

M

Target Key

2920