3.2.1.12 Ensure 'Allow adding VPN configurations' is set to 'Disabled'

Information

This recommendation pertains to the addition of user-defined VPN configurations.

Rationale:
This recommendation allows an institution to ensure that only the VPN configurations they provide are loaded onto the device.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

1. Open Apple Configurator.
2. Open the Configuration Profile.
3. In the left windowpane, click on the Restrictions tab.
4. In the right windowpane, under the tab Functionality, uncheck the checkbox for Allow adding VPN configurations.
5. Deploy the Configuration Profile.

See Also

https://workbench.cisecurity.org/files/2141

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7b., CSCv6|9

Plugin: MDM

Control ID: 5e6861ff9d1b2ec9d12d835cbe2d492fec3163bb15a510bf5d3ac286db1d4a82