HPE Aruba Networking AOS Wireless Security Technical Implementation Guide

The HPE Aruba Networking AOS Wireless Security Technical Implementation Guide (V1 R3) has 14 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

14STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R3

CurrentPublished Wed Sep 30 2026

AOS wireless local area network (WLAN) service set identifiers (SSIDs) must be changed from the manufacturer's default to a pseudo random word that does not identify the unit, base, organization, etc.

HPE Aruba Networking AOS Wireless Security Technical Implementation Guide

Assessment Title

Rule Text

AOS wireless local area network (WLAN) service set identifiers (SSIDs) must be changed from the manufacturer's default to a pseudo random word that does not identify the unit, base, organization, etc.

Description

Discussion Text

An SSID that identifies the unit, site, or purpose of the WLAN or is set to the manufacturer default may cause an operational security vulnerability.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-266708

Rule

SV-266708r1040614_rule

Severity

low

Rule Version

ARBA-NT-001660

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Review AOS WLAN configuration by navigating to Configuration >> WLANs. 

If the WLAN SSIDs listed in the "NAME (SSID)" column are not pseudo random words, this is a finding.

Implementation Procedure

Fix Text

Configure AOS using the web interface: 

1. Navigate to Configuration >> WLANs and click on the "+" sign to create a guest WLAN. 
2. Configure the SSID with a pseudo random word. 
3. Finish configuring the WLAN. 
4. Click Pending Changes >> Deploy Changes.

STIG check 14 of 14 in the HPE Aruba Networking AOS Wireless STIG checklist

← Previous · V-266707AOS, when used as a WLAN bridge or controller, must be configured to only permit management traffic that ingresses and egresses the out-of-band management (OOBM) interface.