[NordSec] DNS routing is not a primary use-case for mesh (5923fc91) · Commits · STAN4CRA / EN 304 620 Virtual Private Networks Part 1

EN-304-620.md

+5 −5

Original line number	Diff line number	Diff line
		@@ -1434,12 +1434,12 @@ _Editor's note: this table must be updated before the draft can be considered Fi
		\| REQ-CON-03 (MI-ROUT-2) \| \| x \| x \| x \| x \| x \| x \|
		\| REQ-CON-04 (MI-ROUT-3) \| x \| x \| x \| \| \| \| \|
		\| REQ-CON-05 (MI-ROUT-4) \| \| \| \| \| \| \| x \|
		\| REQ-CON-06 (MI-DNSL-1) \| \| x \| x \| x \| x \| \| x \|
		\| REQ-CON-07 (MI-DNSL-2) \| \| x \| x \| x \| x \| \| x \|
		\| REQ-CON-08 (MI-DNSL-3) \| \| \| x \| x \| x \| \| x \|
		\| REQ-CON-09 (MI-DNSL-5) \| \| \| x \| x \| x \| \| x \|
		\| REQ-CON-06 (MI-DNSL-1) \| \| x \| x \| x \| x \| \| \|
		\| REQ-CON-07 (MI-DNSL-2) \| \| x \| x \| x \| x \| \| \|
		\| REQ-CON-08 (MI-DNSL-3) \| \| \| x \| x \| x \| \| \|
		\| REQ-CON-09 (MI-DNSL-5) \| \| \| x \| x \| x \| \| \|
		\| REQ-CON-10 (MI-DNSL-6) \| \| \| x \| x \| x \| \| \|
		\| REQ-CON-11 (MI-DNSL-7) \| \| x \| x \| x \| x \| x \| x \|
		\| REQ-CON-11 (MI-DNSL-7) \| \| x \| x \| x \| x \| x \| \|
		\| REQ-CON-12 (MI-IPV6-1) \| x \| x \| x \| x \| x \| x \| x \|
		\| REQ-CON-13 (MI-IPV6-2) \| x \| x \| x \| x \| x \| x \| x \|
		\| REQ-CON-14 (MI-CRYPT-1) \| x \| x \| x \| x \| x \| x \| x \|

clauses/5.Requirements.md

+10 −10

Original line number	Diff line number	Diff line
		@@ -854,7 +854,7 @@ The VPN traffic shall be encrypted between the VPN client and the designated end
		* UC-4: required
		* UC-5: required
		* UC-6: not required
		* UC-7: required
		* UC-7: not required

		### 5.7.7 REQ-CON-07 (MI-DNSL-2) Configurable exclusive DNS routing

		@@ -873,7 +873,7 @@ Products within the following use cases shall fulfill at least one of the ab
		* UC-4: required
		* UC-5: required
		* UC-6: not required
		* UC-7: required
		* UC-7: not required

		### 5.7.8 REQ-CON-08 (MI-DNSL-3) Exclusive DNS routing by default

		@@ -889,7 +889,7 @@ The VPN client shall route all requests that use well-known DNS query ports thro
		* UC-4: required
		* UC-5: required
		* UC-6: not required
		* UC-7: required
		* UC-7: not required

		### 5.7.9 REQ-CON-09 (MI-DNSL-5) DNS configuration consistency

		@@ -907,7 +907,7 @@ This requirement is only applicable if changes in the local DNS configuration wo
		* UC-4: required
		* UC-5: required
		* UC-6: not required
		* UC-7: required
		* UC-7: not required

		### 5.7.10 REQ-CON-10 (MI-DNSL-6) Secure DNS protocols

		@@ -939,7 +939,7 @@ The VPN client shall ensure that DNS queries using well-known ports intended for
		* UC-4: required
		* UC-5: required
		* UC-6: required
		* UC-7: required
		* UC-7: not required

		### 5.7.12 REQ-CON-12 (MI-IPV6-1) Block IPv6 if Unsupported (MI-IPV6-1)

		@@ -1034,12 +1034,12 @@ Depending on the data type and operational environment, the product shall protec
		\| REQ-CON-03 (MI-ROUT-2) \| \| x \| x \| x \| x \| x \| x \|
		\| REQ-CON-04 (MI-ROUT-3) \| x \| x \| x \| \| \| \| \|
		\| REQ-CON-05 (MI-ROUT-4) \| \| \| \| \| \| \| x \|
		\| REQ-CON-06 (MI-DNSL-1) \| \| x \| x \| x \| x \| \| x \|
		\| REQ-CON-07 (MI-DNSL-2) \| \| x \| x \| x \| x \| \| x \|
		\| REQ-CON-08 (MI-DNSL-3) \| \| \| x \| x \| x \| \| x \|
		\| REQ-CON-09 (MI-DNSL-5) \| \| \| x \| x \| x \| \| x \|
		\| REQ-CON-06 (MI-DNSL-1) \| \| x \| x \| x \| x \| \| \|
		\| REQ-CON-07 (MI-DNSL-2) \| \| x \| x \| x \| x \| \| \|
		\| REQ-CON-08 (MI-DNSL-3) \| \| \| x \| x \| x \| \| \|
		\| REQ-CON-09 (MI-DNSL-5) \| \| \| x \| x \| x \| \| \|
		\| REQ-CON-10 (MI-DNSL-6) \| \| \| x \| x \| x \| \| \|
		\| REQ-CON-11 (MI-DNSL-7) \| \| x \| x \| x \| x \| x \| x \|
		\| REQ-CON-11 (MI-DNSL-7) \| \| x \| x \| x \| x \| x \| \|
		\| REQ-CON-12 (MI-IPV6-1) \| x \| x \| x \| x \| x \| x \| x \|
		\| REQ-CON-13 (MI-IPV6-2) \| x \| x \| x \| x \| x \| x \| x \|
		\| REQ-CON-14 (MI-CRYPT-1) \| x \| x \| x \| x \| x \| x \| x \|

Original line number	Diff line number	Diff line
		@@ -1434,12 +1434,12 @@ _Editor's note: this table must be updated before the draft can be considered Fi
		\| REQ-CON-03 (MI-ROUT-2) \| \| x \| x \| x \| x \| x \| x \|
		\| REQ-CON-04 (MI-ROUT-3) \| x \| x \| x \| \| \| \| \|
		\| REQ-CON-05 (MI-ROUT-4) \| \| \| \| \| \| \| x \|
		\| REQ-CON-06 (MI-DNSL-1) \| \| x \| x \| x \| x \| \| x \|
		\| REQ-CON-07 (MI-DNSL-2) \| \| x \| x \| x \| x \| \| x \|
		\| REQ-CON-08 (MI-DNSL-3) \| \| \| x \| x \| x \| \| x \|
		\| REQ-CON-09 (MI-DNSL-5) \| \| \| x \| x \| x \| \| x \|
		\| REQ-CON-06 (MI-DNSL-1) \| \| x \| x \| x \| x \| \| \|
		\| REQ-CON-07 (MI-DNSL-2) \| \| x \| x \| x \| x \| \| \|
		\| REQ-CON-08 (MI-DNSL-3) \| \| \| x \| x \| x \| \| \|
		\| REQ-CON-09 (MI-DNSL-5) \| \| \| x \| x \| x \| \| \|
		\| REQ-CON-10 (MI-DNSL-6) \| \| \| x \| x \| x \| \| \|
		\| REQ-CON-11 (MI-DNSL-7) \| \| x \| x \| x \| x \| x \| x \|
		\| REQ-CON-11 (MI-DNSL-7) \| \| x \| x \| x \| x \| x \| \|
		\| REQ-CON-12 (MI-IPV6-1) \| x \| x \| x \| x \| x \| x \| x \|
		\| REQ-CON-13 (MI-IPV6-2) \| x \| x \| x \| x \| x \| x \| x \|
		\| REQ-CON-14 (MI-CRYPT-1) \| x \| x \| x \| x \| x \| x \| x \|