WLAN Bridge Security Technical Implementation Guide (STIG)

The WLAN Bridge Security Technical Implementation Guide (STIG) (V6 R15) has 34 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

34STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V6 · R15

CurrentPublished Fri Apr 26 2019

WLAN SSIDs must be changed from the manufacturer’s default to a pseudo random word that does not identify the unit, base, organization, etc.

WLAN Bridge Security Technical Implementation Guide (STIG)

Assessment Title

Rule Text

WLAN SSIDs must be changed from the manufacturer’s default to a pseudo random word that does not identify the unit, base, organization, etc.

Description

Discussion Text

An SSID identifying the unit, site or purpose of the WLAN or is set to the manufacturer default may cause an OPSEC vulnerability.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-14846

Rule

SV-15614r1_rule

Severity

low

Rule Version

WIR0105

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Review device configuration. 
1. Obtain the SSID using a wireless scanner or the AP or WLAN controller management software.  
2. Verify the name is not meaningful (e.g., site name, product name, room number, etc.) or set to the manufacturer's default value.

Mark as a finding if the SSID does not meet the requirement listed above.

Implementation Procedure

Fix Text

Change the SSID to a pseudo random word that does not identify the unit, base, or organization.

STIG check 3 of 34 in the WLAN Bridge STIG (STIG) checklist

← Previous · V-14717The network device must not allow SSH Version 1 to be used for administrative access.Next · V-14886 →Wireless access points and bridges must be placed in dedicated subnets outside the enclave’s perimeter.