User authentication is required prior to establishing a callback connection.

Associated with IA controls: ECSC-1

SV-22010r2_rule User authentication is required prior to establishing a callback connection.

Vulnerability discussion

Callback features are an attempt to protect the network by providing a service that disconnects an incoming call and reestablishes the call, dialing back to a predetermined number. Upon establishment of the callback connection, the communications device will require the user to authenticate to the system.

Check content

To verify, check the configuration of the RAS or the remote access policy server.

Fix text

Ensure that if callback procedures are used, then upon establishment of the callback connection, the communications device will require the user to authenticate to the system.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.