← Back to Virtual Private Network (VPN) Security Requirements Guide

V-207239

CAT II (Medium)

The VPN Gateway must accept the Common Access Card (CAC) credential.

Rule ID

SV-207239r856712_rule

STIG

Virtual Private Network (VPN) Security Requirements Guide

Version

V3R4

CCIs

CCI-001953

Discussion

The use of Personal Identity Verification (PIV) credentials facilitates standardization and reduces the risk of unauthorized access. DoD has mandated the use of the CAC as the PIV credential to support identity management and personal authentication for systems covered under HSPD 12, as well as a primary component of layered protection for national security systems.

Check Content

Verify the VPN Gateway accepts PIV  credentials.

If the VPN Gateway does not accept the CAC credential, this is a finding.

Fix Text

Configure the VPN Gateway to accept the CAC credential.