WLAN Controller Security Technical Implementation Guide (STIG)

The WLAN Controller Security Technical Implementation Guide (STIG) (V6 R15) has 34 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

34STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V6 · R15

CurrentPublished Fri Apr 26 2019

The WLAN inactive session timeout must be set for 30 minutes or less.

WLAN Controller Security Technical Implementation Guide (STIG)

Assessment Title

Rule Text

The WLAN inactive session timeout must be set for 30 minutes or less.

Description

Discussion Text

A WLAN session that never terminates due to inactivity may allow an opening for an adversary to highjack the session to obtain access to the network.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-14888

Rule

SV-15656r1_rule

Severity

medium

Rule Version

WIR0110

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

1. Review the relevant configuration screen of the WLAN controller or access point.   
2. Verify the session timeout setting is set for 30 minutes or less. 
4. Mark as a finding if any of the following are found.
- Session timeout is not set to 30 minutes or less for the entire WLAN.
- The WLAN does not have the capability to enable the session time-out feature.

Implementation Procedure

Fix Text

Set the WLAN inactive session timeout to 30 minutes or less.

STIG check 3 of 34 in the WLAN Controller STIG (STIG) checklist

← Previous · V-14717The network device must not allow SSH Version 1 to be used for administrative access.Next · V-15432 →Network devices must use two or more authentication servers for the purpose of granting administrative access.