Check: WLAN-NW-000600
Network WLAN AP-IG Platform STIG:
WLAN-NW-000600
(in versions v7 r2 through v7 r1)
Title
WLAN components must be FIPS 140-2 or FIPS 140-3 certified. (Cat II impact)
Discussion
If the DoD WLAN components (WLAN AP, controller, or client) are not NIST FIPS 140-2/FIPS 140-3 (Cryptographic Module Validation Program, CMVP) certified, the WLAN system may not adequately protect sensitive unclassified DoD data from compromise during transmission.
Check Content
Review the WLAN equipment specification and verify it is FIPS 140-2/3 (CMVP) certified for data in transit, including authentication credentials. If the WLAN equipment is not is FIPS 140-2/3 (CMVP) certified, this is a finding.
Fix Text
Use WLAN equipment that is FIPS 140-2/3 (CMVP) certified.
Additional Identifiers
Rule ID: SV-243210r720085_rule
Vulnerability ID: V-243210
Group Title: SRG-NET-000151
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-001967 |
The information system authenticates organization-defined devices and/or types of devices before establishing a local, remote, and/or network connection using bidirectional authentication that is cryptographically based. |
Controls
Number | Title |
---|---|
IA-3 (1) |
Cryptographic Bidirectional Authentication |