WLAN Client STIG (STIG)

WLAN Client Security Technical Implementation Guide (STIG)

ID	Vuln ID	Title	Cat
WIR0115-01	V-3692	WLAN must use EAP-TLS.	Cat II
WIR0116	V-30257	WLAN EAP-TLS implementation must use certificate-based PKI authentication to connect to DoD networks.	Cat II
WIR0125-01	V-3515	The WLAN must use AES-CCMP to protect data-in-transit.	Cat II
WIR0165	V-3503	WLAN-capable devices must not use wireless peer-to-peer networks to connect to other devices.	Cat II
WIR0170	V-14002	A device’s wired network interfaces (e.g., Ethernet) must be disconnected or otherwise disabled when wireless connections are in use.	Cat II
WIR0180	V-4632	Laptops with WLAN interfaces must have the WLAN card radio set to OFF as the default setting.	Cat II
WIR0185	V-7072	WLAN clients must not be configured to connect to other WLAN devices without the user initiating a request to establish such a connection.	Cat III
WIR0190	V-14202	FIPS 140-2 validated encryption modules must be used to encrypt unclassified sensitive data at rest on the wireless device (e.g., laptop, PDA, smartphone).	Cat II
WIR0235	V-3512	NSA Type1 products and required procedures must be used to protect classified data at rest (DAR) on wireless devices used on a classified WLAN or WMAN.	Cat I

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.