STIGQter: STIG Summary: Virtual Private Network (VPN) Security Requirements Guide Version: 3 Release: 5 Benchmark Date: 01 Jul 2026:

The VPN Gateway must dynamically associate security attributes with organization-defined objects in accordance with organization-defined security policies as information is created and combined.

DISA Rule

SV-279025r1138062_rule

Vulnerability Number

V-279025

Group Title

SRG-NET-000520

Rule Version

SRG-NET-000520-VPN-002295

Severity

CAT II

CCI(s)

• CCI-002272 - Dynamically associate security attributes with organization-defined objects in accordance with organization-defined security policies as information is created and combined.
• CCI-000366 - Implement the security configuration settings.

Weight

10

Fix Recommendation

Configure the VPN Gateway to dynamically associate security attributes with organization-defined objects in accordance with organization-defined security policies as information is created and combined.

Check Contents

Determine if the VPN Gateway dynamically associates security attributes with organization-defined objects in accordance with organization-defined security policies as information is created and combined.

If the VPN Gateway does not dynamically associate security attributes with organization-defined objects in accordance with organization-defined security policies as information is created and combined, this is a finding.

Vulnerability Number

V-279025

Documentable

False

Rule Version

SRG-NET-000520-VPN-002295

Severity Override Guidance

Determine if the VPN Gateway dynamically associates security attributes with organization-defined objects in accordance with organization-defined security policies as information is created and combined.

If the VPN Gateway does not dynamically associate security attributes with organization-defined objects in accordance with organization-defined security policies as information is created and combined, this is a finding.

Check Content Reference

M

Target Key

2920