STIGQter: STIG Summary: HPE Aruba Networking AOS Wireless Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Apr 2026:

AOS must protect wireless access to the network using authentication of users and/or devices.

DISA Rule

SV-266559r1040167_rule

Vulnerability Number

V-266559

Group Title

SRG-NET-000069

Rule Version

ARBA-NT-000120

Severity

CAT II

CCI(s)

• CCI-001443 - Protect wireless access to the system using authentication of users and/or devices.
• CCI-001444 - Protect wireless access to the system using encryption.

Weight

10

Fix Recommendation

Configure AOS with the following commands:
configure terminal
wlan ssid-profile <profile name>
opmode <wpa2-aes or wpa3-cnsa>
exit
write memory

Check Contents

Verify the AOS configuration with the following command:
show wlan ssid-profile

For each WLAN SSID:
show wlan ssid-profile <SSID profile name>

If a WPA Passphrase is set or if Encryption is not set with wpa2-aes or wpa3-cnsa, this is a finding.

Vulnerability Number

V-266559

Documentable

False

Rule Version

ARBA-NT-000120

Severity Override Guidance

Verify the AOS configuration with the following command:
show wlan ssid-profile

For each WLAN SSID:
show wlan ssid-profile <SSID profile name>

If a WPA Passphrase is set or if Encryption is not set with wpa2-aes or wpa3-cnsa, this is a finding.

Check Content Reference

M

Target Key

5646