3.2.1.15 Ensure 'Allow adding VPN configurations' is set to 'Disabled'

Information

This recommendation pertains to the addition of user-defined VPN configurations.

Rationale:

This recommendation allows an institution to ensure that only the VPN configurations they provide are loaded onto the device.

Solution

Open Apple Configurator.

Open the Configuration Profile.

In the left windowpane, click on the Restrictions tab.

In the right windowpane, under the tab Functionality, uncheck the checkbox for Allow adding VPN configurations.

Deploy the Configuration Profile.

See Also

https://workbench.cisecurity.org/files/3064

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-4, CSCv6|9, CSCv7|9.2

Plugin: MDM

Control ID: 21488b2ba3fd2755946ac601ddcf67b6c799ec22dec2a893e03c4e64f38488c8