STIGQter: STIG Summary: Network WLAN AP-IG Platform Security Technical Implementation Guide Version: 7 Release: 3 Benchmark Date: 27 Apr 2023:

WLAN components must be Wi-Fi Alliance certified with WPA2 or WPA3.

DISA Rule

SV-243209r720082_rule

Vulnerability Number

V-243209

Group Title

SRG-NET-000063

Rule Version

WLAN-NW-000400

Severity

CAT II

CCI(s)

• CCI-001453 - Implement cryptographic mechanisms to protect the integrity of remote access sessions.

Weight

10

Fix Recommendation

Use WLAN equipment that is Wi-Fi Alliance certified with WPA2 or WPA3.

Check Contents

Review the WLAN equipment specification and verify it is Wi-Fi Alliance certified with either the older WPA2 certification or the newer WPA3 certification. WPA3 is preferred but not required at this time.

If the WLAN equipment is not Wi-Fi Alliance certified with WPA2 or WPA3, this is a finding.

Vulnerability Number

V-243209

Documentable

False

Rule Version

WLAN-NW-000400

Severity Override Guidance

Review the WLAN equipment specification and verify it is Wi-Fi Alliance certified with either the older WPA2 certification or the newer WPA3 certification. WPA3 is preferred but not required at this time.

If the WLAN equipment is not Wi-Fi Alliance certified with WPA2 or WPA3, this is a finding.

Check Content Reference

M

Target Key

5395