← Back to Virtual Private Network (VPN) Security Requirements Guide

V-207212

CAT II (Medium)

The IPsec VPN Gateway must use anti-replay mechanisms for security associations.

Rule ID

SV-207212r984303_rule

STIG

Virtual Private Network (VPN) Security Requirements Guide

Version

V3R4

CCIs

CCI-001941

Discussion

Anti-replay is an IPsec security mechanism at a packet level, which helps to avoid unwanted users from intercepting and modifying an ESP packet.

Check Content

Verify the IPsec VPN Gateway  uses anti-replay mechanisms for security associations.

If the IPsec VPN Gateway does not use anti-replay mechanisms for security associations, this is a finding.

Fix Text

Configure the IPsec VPN Gateway to use anti-replay mechanisms for security associations.