3.2.1.16 Ensure 'Allow adding VPN configurations' is set to 'Disabled'

Information

This recommendation pertains to the addition of user-defined VPN configurations.

Rationale:

This recommendation allows an institution to ensure that only the VPN configurations they provide are loaded onto the device.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Open Apple Configurator.

Open the Configuration Profile.

In the left window pane, click on the Restrictions tab.

In the right window pane, under the tab Functionality, uncheck the checkbox for Allow adding VPN configurations.

Deploy the Configuration Profile.

See Also

https://workbench.cisecurity.org/benchmarks/6168