The VPN client on mobile devices must disable split tunneling.

From Windows 8/8.1 Security Technical Implementation Guide

Associated with IA controls: ECWN-1

Associated with: CCI-000366

SV-48427r2_rule The VPN client on mobile devices must disable split tunneling.

Vulnerability discussion

When split tunneling is enabled, device peripherals and other computers communicating with the mobile device may be able to connect to a DoD network and obtain sensitive information or otherwise compromise DoD information resources. Disabling split tunneling eliminates the risk associated with this vulnerability.

Check content

Verify the VPN client on mobile devices is configured to prevent split tunneling for connections to DoD networks. If it is not, this is a finding. Procedures will vary depending on the VPN client used.

Fix text

Configure the VPN client on mobile devices to prevent split tunneling when connecting to DoD networks. Procedures will vary depending on the VPN client used.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.