← Back to Network WLAN Bridge Platform Security Technical Implementation Guide

V-243227

CAT III (Low)

WLAN SSIDs must be changed from the manufacturer's default to a pseudo random word that does not identify the unit, base, organization, etc.

Rule ID

SV-243227r720136_rule

STIG

Network WLAN Bridge Platform Security Technical Implementation Guide

Version

V7R2

CCIs

CCI-000366

Discussion

An SSID identifying the unit, site, or purpose of the WLAN or that is set to the manufacturer default may cause an OPSEC vulnerability.

Check Content

Review device configuration. 

1. Obtain the SSID using a wireless scanner or the AP or WLAN controller management software.
2. Verify the name is not meaningful (e.g., site name, product name, room number, etc.) and is not set to the manufacturer's default value.

If the SSID does not meet the requirement listed above, this is a finding.

Fix Text

Change the SSID to a pseudo random word that does not identify the unit, base, or organization.