@@ -908,20 +908,6 @@ This clause addresses the requirements in the CRA [\[i.1\]](#_ref_i.1) Annex 1 P
The VPN client shall not route traffic through the endpoint from sources/destinations other than the endpoint without the user's explicit informed consent, and such routing shall not be necessary for the use of any unrelated function.
The VPN client shall not route traffic through the endpoint from sources/destinations other than the endpoint without the user's explicit informed consent, and such routing shall not be necessary for the use of any unrelated function.
#### 5.2.11.2 MI-TRAF-1: No capability to route traffic from other sources (### 5.10.N IM)
***\[REQ-IM-myk03]** The VPN client shall not implement the capability for routing traffic from sources/destinations other than the endpoint through an endpoint.
[//]:#(### 6.10.N IM)
* Reference: TR-TRAF
* Requirement: **REQ-IM-myk03**
* Objective: Prevent unauthorized network access to endpoints
* Preparation: None
* Activities: Connect an endpoint and capture the traffic on all interfaces
* Verdict: No traffic originating from the VPN for sources/destinations other than the endpoint => PASS, otherwise FAIL
* Evidence: Packet capture with annotations of origin of packet
#### 5.2.11.3 MI-TRAF-2: Route traffic from other sources disabled by default (### 5.10.N IM)
#### 5.2.11.3 MI-TRAF-2: Route traffic from other sources disabled by default (### 5.10.N IM)
***\[REQ-IM-mho3g]** The VPN client shall disable by default the capability for routing traffic from sources/destinations other than the endpoint through an endpoint.
***\[REQ-IM-mho3g]** The VPN client shall disable by default the capability for routing traffic from sources/destinations other than the endpoint through an endpoint.
