Network WLAN Controller Platform Security Technical Implementation Guide

Version: 7

Checked	Name	Title
☐	SV-243233r817090_rule	The WLAN inactive/idle session timeout must be set for 30 minutes or less.
☐	SV-243234r720157_rule	WLAN must use EAP-TLS.
☐	SV-243235r891326_rule	WLAN components must be FIPS 140-2 or FIPS 140-3 certified and configured to operate in FIPS mode.
☐	SV-243236r720163_rule	WLAN EAP-TLS implementation must use certificate-based PKI authentication to connect to DoD networks.
☐	SV-243237r720166_rule	The network device must be configured to only permit management traffic that ingresses and egresses the out-of-band management (OOBM) interface.
☐	SV-243238r856613_rule	The network device must not be configured to have any feature enabled that calls home to the vendor.