STIGQter: STIG Summary: HPE Aruba Networking AOS Wireless Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Apr 2026:

The network element must protect wireless access to the system using Federal Information Processing Standard (FIPS)-validated Advanced Encryption Standard (AES) block cipher algorithms with an approved confidentiality mode.

DISA Rule

SV-266560r1040170_rule

Vulnerability Number

V-266560

Group Title

SRG-NET-000070

Rule Version

ARBA-NT-000130

Severity

CAT II

CCI(s)

• CCI-001444 - Protect wireless access to the system using encryption.
• CCI-001967 - Authenticate organization-defined devices and/or types of devices before establishing a local, remote, and/or network connection using bidirectional authentication that is cryptographically based.

Weight

10

Fix Recommendation

Configure AOS with the following command:
configure terminal

For each ap system-profile, run the following commands:
ap system-profile <profile-name>
fips-enable
exit
fips enable
write memory
reload

Check Contents

Verify the AOS configuration with the following commands:
show fips
show ap system-profile

For each configured ap system profile:
show ap system-profile <profile-name> | include FIPS

If FIPS is not enabled, this is a finding.

Vulnerability Number

V-266560

Documentable

False

Rule Version

ARBA-NT-000130

Severity Override Guidance

Verify the AOS configuration with the following commands:
show fips
show ap system-profile

For each configured ap system profile:
show ap system-profile <profile-name> | include FIPS

If FIPS is not enabled, this is a finding.

Check Content Reference

M

Target Key

5646