Home
Security Hardening
DISA STIG Cisco ASA VPN V1R1

DISA STIG Cisco ASA VPN V1R1

CASA-VN-000150 – The Cisco ASA must be configured to use Internet Key Exchange (IKE) for all IPsec security associations. – Policy
Details Without IKE, the Security Parameter Index (SPI) is manually specified for each security association. IKE peers will negotiate the...
CASA-VN-000010 – The Cisco ASA must be configured to generate log records containing information to establish what type of VPN events occurred. – svc
Details Without establishing what type of event occurred, it would be difficult to establish, correlate, and investigate the events leading...
CASA-VN-000160 – The Cisco ASA must be configured to use Internet Key Exchange v2 (IKEv2) for all IPsec security associations. – Interface
Details In order to prevent unauthorized connection of devices, unauthorized transfer of information, or unauthorized tunneling (i.e., embedding of data...
CASA-VN-000010 – The Cisco ASA must be configured to generate log records containing information to establish what type of VPN events occurred. – vpn
Details Without establishing what type of event occurred, it would be difficult to establish, correlate, and investigate the events leading...
CASA-VN-000160 – The Cisco ASA must be configured to use Internet Key Exchange v2 (IKEv2) for all IPsec security associations. – IPsec Phase
Details In order to prevent unauthorized connection of devices, unauthorized transfer of information, or unauthorized tunneling (i.e., embedding of data...
CASA-VN-000010 – The Cisco ASA must be configured to generate log records containing information to establish what type of VPN events occurred. – vpnc
Details Without establishing what type of event occurred, it would be difficult to establish, correlate, and investigate the events leading...
CASA-VN-000160 – The Cisco ASA must be configured to use Internet Key Exchange v2 (IKEv2) for all IPsec security associations. – Policy
Details In order to prevent unauthorized connection of devices, unauthorized transfer of information, or unauthorized tunneling (i.e., embedding of data...
CASA-VN-000010 – The Cisco ASA must be configured to generate log records containing information to establish what type of VPN events occurred. – vpnfo
Details Without establishing what type of event occurred, it would be difficult to establish, correlate, and investigate the events leading...
CASA-VN-000010 – The Cisco ASA must be configured to generate log records containing information to establish what type of VPN events occurred. – webfo
Details Without establishing what type of event occurred, it would be difficult to establish, correlate, and investigate the events leading...
CASA-VN-000010 – The Cisco ASA must be configured to generate log records containing information to establish what type of VPN events occurred. – webvpn
Details Without establishing what type of event occurred, it would be difficult to establish, correlate, and investigate the events leading...

DISA STIG Cisco ASA VPN V1R1

CASA-VN-000150 – The Cisco ASA must be configured to use Internet Key Exchange (IKE) for all IPsec security associations. – Policy

CASA-VN-000010 – The Cisco ASA must be configured to generate log records containing information to establish what type of VPN events occurred. – svc

CASA-VN-000160 – The Cisco ASA must be configured to use Internet Key Exchange v2 (IKEv2) for all IPsec security associations. – Interface

CASA-VN-000010 – The Cisco ASA must be configured to generate log records containing information to establish what type of VPN events occurred. – vpn

CASA-VN-000160 – The Cisco ASA must be configured to use Internet Key Exchange v2 (IKEv2) for all IPsec security associations. – IPsec Phase

CASA-VN-000010 – The Cisco ASA must be configured to generate log records containing information to establish what type of VPN events occurred. – vpnc

CASA-VN-000160 – The Cisco ASA must be configured to use Internet Key Exchange v2 (IKEv2) for all IPsec security associations. – Policy

CASA-VN-000010 – The Cisco ASA must be configured to generate log records containing information to establish what type of VPN events occurred. – vpnfo

CASA-VN-000010 – The Cisco ASA must be configured to generate log records containing information to establish what type of VPN events occurred. – webfo

CASA-VN-000010 – The Cisco ASA must be configured to generate log records containing information to establish what type of VPN events occurred. – webvpn