STIGQter: STIG Summary: Network WLAN AP-IG Platform Security Technical Implementation Guide Version: 7 Release: 3 Benchmark Date: 27 Apr 2023:

The WLAN inactive/idle session timeout must be set for 30 minutes or less.

DISA Rule

SV-243208r817084_rule

Vulnerability Number

V-243208

Group Title

SRG-NET-000514

Rule Version

WLAN-NW-000300

Severity

CAT II

CCI(s)

• CCI-000057 - The information system initiates a session lock after the organization-defined time period of inactivity.

Weight

10

Fix Recommendation

Set the WLAN inactive/idle session timeout to 30 minutes or less.

Check Contents

1. Review the relevant configuration screen of the WLAN controller or access point.
2. Verify the inactive/idle session timeout setting is set for 30 minutes or less.

If the inactive/idle session timeout is not set to 30 minutes or less for the entire WLAN, or the WLAN does not have the capability to enable the session timeout feature, this is a finding.

Vulnerability Number

V-243208

Documentable

False

Rule Version

WLAN-NW-000300

Severity Override Guidance

1. Review the relevant configuration screen of the WLAN controller or access point.
2. Verify the inactive/idle session timeout setting is set for 30 minutes or less.

If the inactive/idle session timeout is not set to 30 minutes or less for the entire WLAN, or the WLAN does not have the capability to enable the session timeout feature, this is a finding.

Check Content Reference

M

Target Key

5395