STIGQter: STIG Summary: Network WLAN AP-IG Platform Security Technical Implementation Guide Version: 7 Release: 3 Benchmark Date: 27 Apr 2023: STIGQter: STIG Summary: Network WLAN AP-IG Platform Security Technical Implementation Guide Version: 7 Release: 3 Benchmark Date: 27 Apr 2023:SV-243213r720094_rule
V-243213
SRG-NET-000512
WLAN-NW-001000
CAT II
10
Reconfigure physical and logical connections as needed so the internet-only guest WLAN infrastructure resides in a dedicated subnet off the perimeter firewall or is installed as a completely separate internet-connection-only WLAN system with no access to the enterprise network.
Have the SA show how the guest WLAN is physically connected to the firewall or supporting switch and how it is logically connected through firewall or switch configuration settings.
Verify the equipment is connected via a separate WLAN or logical segmentation of the host WLAN (e.g., separate service set identifier [SSID] and virtual LAN).
Verify the guest WLAN only provides internet access.
If a guest WLAN is not set up as a separate WLAN from the DoD network or is not set up as a logical segmentation from the DoD network or DoD WLAN, this is a finding.
If the guest WLAN does not provide only internet access, this is a finding.
V-243213
False
WLAN-NW-001000
Have the SA show how the guest WLAN is physically connected to the firewall or supporting switch and how it is logically connected through firewall or switch configuration settings.
Verify the equipment is connected via a separate WLAN or logical segmentation of the host WLAN (e.g., separate service set identifier [SSID] and virtual LAN).
Verify the guest WLAN only provides internet access.
If a guest WLAN is not set up as a separate WLAN from the DoD network or is not set up as a logical segmentation from the DoD network or DoD WLAN, this is a finding.
If the guest WLAN does not provide only internet access, this is a finding.
M
5395