The Remote Access VPN Gateway must be configured to prohibit Point-to-Point Tunneling Protocol (PPTP) and L2F.
Overview
Finding ID
Version
Rule ID
IA Controls
Severity
V-207206
SRG-NET-000132-VPN-000470
SV-207206r608988_rule
Medium
Description
The PPTP and L2F are obsolete method for implementing virtual private networks. Both protocols may be easy to use and readily available, but they have many well-known security issues and exploits. Encryption and authentication are both weak.