Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
Forescout must be configured to apply dynamic ACLs that restrict the use of ports when nonentity endpoints are connected using MAC Authentication Bypass (MAB). This is required for compliance with C2C Step 4.
Description
Discussion Text
MAB is only one way of connecting nonentity endpoints, and can be defeated by spoofing the MAC address of an assumed authorized device. By adding the device to the MAR, the device can then gain access to the network.
NPE devices that can support PKI or an allowed authentication type must use PKI. MAB may be used for NPE that cannot support an approved device authentication. Nonentity endpoints include Internet of Things (IoT) devices, VoIP phone, and printer.
NPE devices that can support PKI or an allowed authentication type must use PKI. MAB may be used for NPE that cannot support an approved device authentication. Nonentity endpoints include Internet of Things (IoT) devices, VoIP phone, and printer.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.