Title

All wireless PDA and smartphone client VPNs must have split tunneling disabled. (Cat II impact)

Discussion

DoD data could be compromised if transmitted data is not secured with a compliant VPN.

Check Content

This check is not applicable if the installed VPN client is not used for remote access to DoD networks. Interview the IAO and/or site wireless device administrator and inspect a sample (3-4) of site devices. Check to see if the VPN has a setting to disable split tunneling. Verify split tunneling has been disabled. Mark not applicable if the VPN is not used for remote access to a DoD network.

Fix Text

Use only VPN clients supporting the capability to disable split-tunneling.

Additional Identifiers

Rule ID: SV-35007r1_rule

Vulnerability ID: V-19899

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.