STIGQter: STIG Summary: HPE Aruba Networking AOS Wireless Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Apr 2026:

AOS must use Transport Layer Security (TLS) 1.2, at a minimum, to protect the confidentiality of sensitive data during electronic dissemination using remote access.

DISA Rule

SV-266557r1040161_rule

Vulnerability Number

V-266557

Group Title

SRG-NET-000062

Rule Version

ARBA-NT-000100

Severity

CAT II

CCI(s)

CCI-000068 - Implement cryptographic mechanisms to protect the confidentiality of remote access sessions.
CCI-001453 - Implement cryptographic mechanisms to protect the integrity of remote access sessions.

Weight

Fix Recommendation

Configure AOS with the following commands:
configure terminal
web-server profile
ssl-protocol tlsv1.2
exit
write memory

Check Contents

Verify the AOS configuration with the following command:
show web-server profile

If "tlsv1.2" is not returned for "SSL/TLS Protocol Config", this is a finding.

Vulnerability Number

V-266557

Documentable

False

Rule Version

ARBA-NT-000100

Severity Override Guidance

Verify the AOS configuration with the following command:
show web-server profile

If "tlsv1.2" is not returned for "SSL/TLS Protocol Config", this is a finding.

Check Content Reference

Target Key

5646