Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
The VPN Gateway must use Always On VPN connections for remote computing.
Description
Discussion Text
Allowing remote users to manually toggle a VPN connection can create critical security risks. With Always On VPN, if a secured connection to the gateway is lost, hybrid-working users will simply be disconnected from the internet until the issue is solved.
"Always On" is a term that describes a VPN connection that is secure and always on after the initial connection is established. An Always On VPN deployment establishes a VPN connection with the client without the need for user interaction (e.g., user credentials). The remote client must not be able to access the Internet without first established a VPN session with a DoW site.
Note that device compliance checks are still required prior to connecting to DoW resources. Although out of scope for this requirement, the connection process must ensure that remote devices meet security standards before accessing DoW resources. Devices that fail to meet compliance requirements can be denied access, reducing the risk of compromised endpoints.
"Always On" is a term that describes a VPN connection that is secure and always on after the initial connection is established. An Always On VPN deployment establishes a VPN connection with the client without the need for user interaction (e.g., user credentials). The remote client must not be able to access the Internet without first established a VPN session with a DoW site.
Note that device compliance checks are still required prior to connecting to DoW resources. Although out of scope for this requirement, the connection process must ensure that remote devices meet security standards before accessing DoW resources. Devices that fail to meet compliance requirements can be denied access, reducing the risk of compromised endpoints.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.