Cisco ASA VPN Security Technical Implementation Guide
Rules, Groups, and Values defined within the XCCDF Benchmark
-
SRG-NET-000320-VPN-001120
<GroupDescription></GroupDescription>Group -
The Cisco ASA remote access VPN server must be configured to use LDAP over SSL to determine authorization for granting access to the network.
<VulnDiscussion>Protecting authentication communications between the client, the VPN Gateway, and the authentication server keeps this critic...Rule Medium Severity -
SRG-NET-000138-VPN-000490
<GroupDescription></GroupDescription>Group -
The Cisco ASA remote access VPN server must be configured to identify and authenticate users before granting access to the network.
<VulnDiscussion>To assure accountability and prevent unauthenticated access, organizational users must be identified and authenticated to pre...Rule Medium Severity -
SRG-NET-000140-VPN-000500
<GroupDescription></GroupDescription>Group -
The Cisco ASA remote access VPN server must be configured to enforce certificate-based authentication before granting access to the network.
<VulnDiscussion>To assure accountability and prevent unauthenticated access, non-privileged users must utilize multifactor authentication to ...Rule High Severity -
SRG-NET-000166-VPN-000590
<GroupDescription></GroupDescription>Group -
SRG-NET-000041-VPN-000110
<GroupDescription></GroupDescription>Group -
The Cisco ASA remote access VPN server must be configured to display the Standard Mandatory DoD Notice and Consent Banner before granting access to the network.
<VulnDiscussion>Display of a standardized and approved use notification before granting access to the network ensures privacy and security no...Rule Medium Severity -
SRG-NET-000079-VPN-000300
<GroupDescription></GroupDescription>Group
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.