WLAN Bridge Security Technical Implementation Guide (STIG)

The WLAN Bridge Security Technical Implementation Guide (STIG) (V6 R15) has 34 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

34STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V6 · R15

CurrentPublished Fri Apr 26 2019

Network devices must only allow SNMP read-only access.

WLAN Bridge Security Technical Implementation Guide (STIG)

Assessment Title

Rule Text

Network devices must only allow SNMP read-only access.

Description

Discussion Text

Enabling write access to the device via SNMP provides a mechanism that can be exploited by an attacker to set configuration variables that can disrupt network operations.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-3969

Rule

SV-3969r5_rule

Severity

medium

Rule Version

NET0894

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Review the network device configuration and verify SNMP community strings are read-only when using SNMPv1, v2c, or basic v3 (no authentication or privacy). Write access may be used if authentication is configured when using SNMPv3. 

If write-access is used for SNMP versions 1, 2c, or 3-noAuthNoPriv mode and there is no documented approval by the ISSO, this is a finding.

Implementation Procedure

Fix Text

Configure the network device to allow for read-only SNMP access when using SNMPv1, v2c, or basic v3 (no authentication or privacy). Write access may be used if authentication is configured when using SNMPv3.

STIG check 27 of 34 in the WLAN Bridge STIG (STIG) checklist

← Previous · V-3967The network devices must time out access to the console port at 10 minutes or less of inactivity.Next · V-4582 →The network device must require authentication for console access.