OpenControls Logo

STIG Viewer

STIGViewer Support

The VPN Gateway must uniquely identify and authenticate source by organization, system, application, and/or individual for information transfer.

Overview

Finding IDVersionRule IDIA ControlsSeverity
V-279021SRG-NET-000325-VPN-001125SV-279021r1138050_ruleCCI-002205medium
Description
Attribution is a critical component of a security concept of operations. The ability to identify source and destination points for information flowing in information systems, allows the forensic reconstruction of events when required, and encourages policy compliance by attributing policy violations to specific organizations/individuals. Successful domain authentication requires that information system labels distinguish among systems, organizations, and individuals involved in preparing, sending, receiving, or disseminating information. This requirement applies to VPN Gateways that transfer information between different security domains (e.g., cross-domain solutions). This requirement also applies to Zero Trust initiatives.
STIGDate
Virtual Private Network (VPN) Security Requirements Guide2025-09-10

Related Frameworks

1 mapping across 3 frameworks
SCF0 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (1) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

NET-04.12Cross Domain Authentication
1.00
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (27) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-17(10)Authenticate Remote Commands
1.00
AC-2(1)Automated System Account Management
1.00
AC-2(11)Usage Conditions
1.00
AC-2(3)Disable Accounts
1.00
AC-4(17)Domain Authentication
1.00
CM-6Configuration Settings
1.00
IA-11Re-authentication
1.00
IA-13Identity Providers and Authorization Servers
1.00
IA-13(01)Protection of Cryptographic Keys
1.00
IA-13(02)Verification of Identity Assertions and Access Tokens
1.00

+17 more (top 10 by confidence shown)

CCI1 mapping
CCI-002205
1.00

Details

Check Text (C-279021r1138050_chk)

Determine if the VPN Gateway uniquely identifies and authenticates source by organization, system, application, and/or individual for information transfer. If the VPN Gateway does not uniquely identify and authenticate source by organization, system, application, and/or individual for information transfer, this is a finding.

Fix Text (F-83474r1138049_fix)

Configure the VPN Gateway to uniquely identify and authenticate source by organization, system, application, and/or individual for information transfer.