Title

All wireless PDA clients used for remote access to DoD networks must have a VPN capability that supports AES encryption. (Cat II impact)

Discussion

DoD data could be compromised if transmitted data is not secured with a compliant VPN.

Check Content

This check is not applicable if the installed VPN client is not used for remote access to DoD networks. Interview the IAO and/or site wireless device administrator and inspect a sample (3-4) of site devices. Review VPN client specification sheets. Verify the VPN client support AES encryption. Mark as a finding if AES is not supported. Also mark as a finding if no VPN capability is present.

Fix Text

Comply with requirement.

Additional Identifiers

Rule ID: SV-31705r1_rule

Vulnerability ID: V-19897

Group Title: Remote access VPN - AES encryption

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.