← Back to Network WLAN Bridge Platform Security Technical Implementation Guide

V-243229

CAT II (Medium)

WLAN components must be FIPS 140-2 or FIPS 140-3 certified and configured to operate in FIPS mode.

Rule ID

SV-243229r891323_rule

STIG

Network WLAN Bridge Platform Security Technical Implementation Guide

Version

V7R2

CCIs

CCI-001967

Discussion

If the DoD WLAN components (WLAN AP, controller, or client) are not NIST FIPS 140-2/FIPS 140-3 (Cryptographic Module Validation Program, CMVP) certified, the WLAN system may not adequately protect sensitive unclassified DoD data from compromise during transmission.

Check Content

Review the WLAN equipment specification and verify it is FIPS 140-2/3 (CMVP) certified for data in transit, including authentication credentials. Verify the component is configured to operate in FIPS mode.

If the WLAN equipment is not is FIPS 140-2/3 (CMVP) certified or is not configured to operate in FIPS mode, this is a finding.

Fix Text

Use WLAN equipment that is FIPS 140-2/3 (CMVP) certified. Configure the component to operate in FIPS mode.