Rotate your device back to portrait to use STIG Vault.
The WMAN Access Point Security Technical Implementation Guide (STIG) (V6 R13) has 42 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.
Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Rule Text
Discussion Text
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.
Detailed Policy Requirements:
Site WMAN systems that transmit classified data must implement the following data encryption controls:
- The WMAN system must implement FIPS 140-2 validated encryption to protect the ISO OSI Layer 2 radio data frames. The WMAN system will be configured for AES-CCM encryption, if supported by the WMAN system. (Not required for classified WMAN bridges.)
- The WMAN system must implement NSA Type 1 certified High Assurance Internet Protocol Encryptor (HAIPE) encryption, other NSA Type 1 certified encryption, or NSA approved Suite B overlay encryption at ISO OSI Layer 3 to protect data being transmitted.
Check Procedures:
Review the WMAN product specification sheets.
- Verify FIPS 140-2 validated encryption is being used at OSI Layer 2 to protect the radio data frames.
- Determine if the system supports AES-CCM encryption. If yes, verify the system has been configured for AES-CCM encryption.
- Verify NSA Type 1 certified High Assurance Internet Protocol Encryptor (HAIPE) encryption, other NSA Type 1 certified encryption, or NSA approved Suite B overlay encryption is being used at OSI Layer 3 to protect data being transmitted.
Mark as a finding if any of these requirements have not been met.
Comply with policy.