STIGQter: STIG Summary: Network WLAN AP-NIPR Platform Security Technical Implementation Guide Version: 7 Release: 3 Benchmark Date: 27 Apr 2023:

The network device must be configured to only permit management traffic that ingresses and egresses the out-of-band management (OOBM) interface.

DISA Rule

SV-243225r720130_rule

Vulnerability Number

V-243225

Group Title

SRG-NET-000205

Rule Version

WLAN-NW-001200

Severity

CAT II

CCI(s)

• CCI-001097 - Monitor and control communications at the external managed interfaces to the system and at key managed interfaces within the system.

Weight

10

Fix Recommendation

Configure the network device so that only management traffic that ingresses and egresses the OOBM interface is permitted.

Check Contents

Review the device configuration to determine if the OOB management interface is assigned an appropriate IP address from the authorized OOB management network.

If an IP address assigned to the interface is not from an authorized OOB management network, this is a finding.

Vulnerability Number

V-243225

Documentable

False

Rule Version

WLAN-NW-001200

Severity Override Guidance

Review the device configuration to determine if the OOB management interface is assigned an appropriate IP address from the authorized OOB management network.

If an IP address assigned to the interface is not from an authorized OOB management network, this is a finding.

Check Content Reference

M

Target Key

5396