STIGQter: STIG Summary: HPE Aruba Networking AOS Wireless Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Apr 2026:

The site must conduct continuous wireless Intrusion Detection System (IDS) scanning.

DISA Rule

SV-266704r1192887_rule

Vulnerability Number

V-266704

Group Title

SRG-NET-000512

Rule Version

ARBA-NT-001600

Severity

CAT II

CCI(s)

• CCI-002686 - Defines the system components at which organization-defined host-based monitoring mechanisms are to be implemented.

Weight

10

Fix Recommendation

Configure AOS using the web interface:

1. To provision access points as dedicated air monitors to perform continuous WIDS scanning, navigate to Configuration >> AP Groups.
2. Click on the "+" sign to add a new AP group.
3. Name the group.
4. Select the created group.
5. Click on "Radio". Change each Radio mode to "am-mode".  
6. Click Submit >> Pending Changes >> Deploy Changes.
7. Navigate to "Access Points".
8. Select "Allowlist".
9. Configure the desired access points as air monitors by provisioning them to the AP group created earlier.
10. Click Submit >> Pending Changes >> Deploy Changes.

Note: Access points in ap-mode perform WIDS scanning between processing client data packets. Air monitors do not advertise WLANs or handle client data.

Check Contents

Interview the site information system security officer (ISSO). Determine if scanning by a WIDS is being conducted and if it is continuous or periodic.

If a continuous scanning WIDS is used, there is no finding.

If periodic scanning is used, verify the exception to policy is documented and signed by the AO. Verify the exception meets one of the required criteria.

If periodic scanning is being performed but requirements have not been met, this is a finding.

If no WIDS scanning is being performed at the site, this is a finding.

Vulnerability Number

V-266704

Documentable

False

Rule Version

ARBA-NT-001600

Severity Override Guidance

Interview the site information system security officer (ISSO). Determine if scanning by a WIDS is being conducted and if it is continuous or periodic.

If a continuous scanning WIDS is used, there is no finding.

If periodic scanning is used, verify the exception to policy is documented and signed by the AO. Verify the exception meets one of the required criteria.

If periodic scanning is being performed but requirements have not been met, this is a finding.

If no WIDS scanning is being performed at the site, this is a finding.

Check Content Reference

M

Target Key

5646