The Remote Access VPN Gateway must be configured to prohibit Point-to-Point Tunneling Protocol (PPTP) and Layer 2 Forwarding (L2F).
An XCCDF Rule
Description
PPTP and L2F are obsolete methods for implementing virtual private networks. Both protocols may be easy to use and readily available, but they have many well-known security issues and exploits. Encryption and authentication are both weak.
- ID
- SV-266998r1040760_rule
- Version
- ARBA-VN-000470
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Configure AOS with the following commands:
configure terminal
cd /mm
ip access-list session vpnlogon
any any svc-pptp deny
exit