CCI|CCI-002397

Title

Prevent split tunneling for remote devices connecting to organizational systems unless the split tunnel is securely provisioned using organization-defined safeguards.

Reference Item Details

Reference: CCI - DISA Control Correlation Identifier

Category: 2024

Audit Items

View all Reference Audit Items

Name	Plugin	Audit Name
ARBA-NT-000970 - AOS, in conjunction with a remote device, must prevent the device from simultaneously establishing nonremote connections with the system and communicating via some other connection to resources in external networks.	ArubaOS	DISA HPE Aruba Networking AOS Wireless STIG v1r2
ARBA-VN-001620 - AOS, when used as a VPN Gateway, must disable split-tunneling for remote client VPNs.	ArubaOS	DISA HPE Aruba Networking AOS VPN STIG v1r1
CASA-VN-000700 - The Cisco ASA VPN remote access server must be configured to disable split-tunneling for remote clients.	Cisco	DISA STIG Cisco ASA VPN v2r2
F5BI-AP-300161 - The F5 BIG-IP appliance providing remote access intermediary services must disable split-tunneling for remote clients' VPNs.	F5	DISA F5 BIG-IP TMOS ALG STIG v1r2
JUSX-VN-000028 - The Juniper SRX Services Gateway VPN must disable split-tunneling for remote clients VPNs.	Juniper	DISA Juniper SRX Services Gateway VPN v3r2