DISA releases out-of-cycle update for the Virtual Private Network Security Requirements Guide and the Web Server Security Requirements Guide

The Defense Information Systems Agency has released an out-of-cycle update for the Virtual Private Network Security Requirements Guide (SRG) and the Web Server SRG, which become effective immediately upon release.

Customers who possess a Common Access Card that has valid Department of Defense certificates can obtain the STIG from the DOD Cyber Exchange website at https://cyber.mil/stigs/downloads/. The STIG is also available on the Cyber Exchange public site at https://public.cyber.mil/stigs/downloads.

Users who are unable to find and download the guide or other content can report their issue to the Cyber Exchange web team at dod.cyberexchange@mail.mil. Individuals who have further questions related to STIG content should email the DISA STIG customer support desk at disa.stig_spt@mail.mil.