Skip to content

Cisco ASA VPN Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • The Cisco ASA remote access VPN server must be configured to produce log records containing information to establish the outcome of the events.

    <VulnDiscussion>Without information about the outcome of events, security personnel cannot make an accurate assessment as to whether an attac...
    Rule Medium Severity
  • SRG-NET-000062-VPN-000200

    <GroupDescription></GroupDescription>
    Group
  • The Cisco ASA remote access VPN server must be configured to enforce certificate-based authentication before granting access to the network.

    &lt;VulnDiscussion&gt;To assure accountability and prevent unauthenticated access, non-privileged users must utilize multifactor authentication to ...
    Rule High Severity
  • SRG-NET-000166-VPN-000590

    <GroupDescription></GroupDescription>
    Group
  • SRG-NET-000041-VPN-000110

    <GroupDescription></GroupDescription>
    Group

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules