STIGQter: STIG Summary: Virtual Private Network (VPN) Security Requirements Guide Version: 3 Release: 5 Benchmark Date: 01 Jul 2026:

The VPN Gateway, when transferring information between different security domains, must apply the same security policy filtering to metadata as it applies to data payloads.

DISA Rule

SV-279023r1138056_rule

Vulnerability Number

V-279023

Group Title

SRG-NET-000328

Rule Version

SRG-NET-000328-VPN-001128

Severity

CAT II

CCI(s)

• CCI-002211 - When transferring information between different security domains, implement organization-defined security or privacy filters on metadata.
• CCI-000366 - Implement the security configuration settings.

Weight

10

Fix Recommendation

Configure the VPN Gateway to apply the same security policy filtering to metadata as it applies to data payloads, when transferring information between different security domains.

Check Contents

Determine if the VPN Gateway, when transferring information between different security domains, applies the same security policy filtering to metadata as it applies to data payloads.

If the VPN Gateway does not apply the same security policy filtering to metadata as it applies to data payloads, when transferring information between different security domains, this is a finding.

Vulnerability Number

V-279023

Documentable

False

Rule Version

SRG-NET-000328-VPN-001128

Severity Override Guidance

Determine if the VPN Gateway, when transferring information between different security domains, applies the same security policy filtering to metadata as it applies to data payloads.

If the VPN Gateway does not apply the same security policy filtering to metadata as it applies to data payloads, when transferring information between different security domains, this is a finding.

Check Content Reference

M

Target Key

2920