TMA-IOS-2.6.1
Ensure "VPN" is "Configured"
설명
This recommendation pertains to establishing a virtual private network (VPN) connection when appropriate. Profile: Level 1 - End-User Owned Devices.
점검 방법
감사 방식: 수동 검토
이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.
This audit procedure cannot be accomplished with a checkbox verification. As mentioned below, a per-application VPN configuration is the preferred solution, but a system-wide VPN is also acceptable. The auditor will need to determine which solution, and to what extent in the per-application VPN case, is appropriate. From the Configuration Profile: Apple Configurator > Configuration Profile > VPN tab > enter an appropriate VPN configuration > Deploy the Configuration Profile. From the device: Settings > General > VPN > Inspect the configuration.
조치 방법
조치 방식: 가이드 또는 인프라 패치
This remediation procedure cannot be accomplished with a checkbox. As mentioned below, a per-application VPN configuration is the preferred option, but a system-wide VPN is also acceptable. An appropriate solution will need to be determined and implemented. From the Configuration Profile: Apple Configurator > Configuration Profile > VPN tab > enter an appropriate VPN configuration > Deploy the Configuration Profile. From the device: Settings > General > VPN > Enter an appropriate VPN configuration.
속성
- 운영 체제
- 모두
- 태그
- iosend-user-owned
- 참고 자료
- CIS Apple iOS 26 Benchmark v1.0.0 - 2.6.1 Ensure "VPN" is "Configured"