An error occurred:

Harris SecNet 11 / 54 STIG (STIG)

Harris SecNet 11 / 54 Security Technical Implementation Guide (STIG)

ID Vuln ID Title Cat Status
WIR0105 V-14846 WLAN SSIDs must be changed from the manufacturer’s default to a pseudo random word that does not identify the unit, base, organization, etc. Cat III
WIR0135 V-14886 Wireless access points and bridges must be placed in dedicated subnets outside the enclave’s perimeter. Cat II
WIR0170 V-14002 A device’s wired network interfaces (e.g., Ethernet) must be disconnected or otherwise disabled when wireless connections are in use. Cat II
WIR0205 V-15300 Any wireless technology used to transmit classified information must be an NSA Type 1 product. Cat I
WIR0210 V-4636 A Secure WLAN (SWLAN) must conform to an approved network architecture. Cat I
WIR0215 V-18582 A Secure WLAN (SWLAN) connected to the SIPRNet must have a SIPRNet connection approval package must be on file with the Classified Connection Approval Office (CCAO). Cat I
WIR0220 V-18583 Before a Secure WLAN (SWLAN) becomes operational and is connected to the SIPRNet the Certified TEMPEST Technical Authority (CTTA) must be notified. Cat II
WIR0225 V-18584 Physical security controls must be implemented for SWLAN access points. Cat II
WIR0226 V-30359 SWLAN access points must implement MAC filtering. Cat III
WIR0230 V-7075 The site must have written procedures for the protection, handling, accounting, and use of NSA Type 1 products. Cat III
WIR0231 V-30369 SWLAN must be rekeyed at least every 90 days. Cat I
WIR0235 V-3512 NSA Type1 products and required procedures must be used to protect classified data at rest (DAR) on wireless devices used on a classified WLAN or WMAN. Cat I
WIR0235 (1) V-3512 NSA Type1 products and required procedures must be used to protect classified data at rest (DAR) on wireless devices used on a classified WLAN or WMAN. Cat I
WIR2017 V-72525 Only supported versions of the Harris SecNet 11/54 should be used. Cat I

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.