Samsung Android 14 must prohibit DOD VPN profiles in the Personal Profile.

Severity	Group ID	Group Title	Version	Rule ID	Date	STIG Version
low	V-260458	PP-MDF-331090	KNOX-14-720070	SV-260458r950953_rule	2024-02-21	1

Description
If DOD VPN profiles are configured in the Personal Profile DOD sensitive data world be at risk of compromise and the DOD network could be at risk of being attacked by malware installed on the device. SFR ID: FMT_SMF_EXT.1.1 #3

ℹ️ Check
Review the list of VPN profiles in the Personal Profile and determine if any VPN profiles are listed. If so, verify the VPN profiles are not configured with a DOD network VPN profile. If any VPN profiles are installed in the Personal Profile and they have a DOD network VPN profile configured, this is a finding. Note: This setting cannot be managed by the MDM administrator and is a User-Based Enforcement (UBE) requirement.

ℹ️ Check

Review the list of VPN profiles in the Personal Profile and determine if any VPN profiles are listed. If so, verify the VPN profiles are not configured with a DOD network VPN profile. If any VPN profiles are installed in the Personal Profile and they have a DOD network VPN profile configured, this is a finding. Note: This setting cannot be managed by the MDM administrator and is a User-Based Enforcement (UBE) requirement.

✔️ Fix
Do not configure DOD VPN profiles in the Personal Profile.