Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
The ICS must be configured to use TLS 1.2, at a minimum.
Description
Discussion Text
Using older unauthorized versions or incorrectly configuring protocol negotiation makes the gateway vulnerable to known and unknown attacks that exploit vulnerabilities in this protocol.
NIST SP 800-52 Rev2 provides guidance for client negotiation on either DOD-only or public-facing servers.
Satisfies: SRG-NET-000062-VPN-000200, SRG-NET-000371-VPN-001650, SRG-NET-000530-VPN-002340, SRG-NET-000540-VPN-002350
NIST SP 800-52 Rev2 provides guidance for client negotiation on either DOD-only or public-facing servers.
Satisfies: SRG-NET-000062-VPN-000200, SRG-NET-000371-VPN-001650, SRG-NET-000530-VPN-002340, SRG-NET-000540-VPN-002350
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.