← Back to General Purpose Operating System Security Requirements Guide

V-203689

CAT II (Medium)

The operating system must protect wireless access to the system using authentication of users and/or devices.

Rule ID

SV-203689r991569_rule

STIG

General Purpose Operating System Security Requirements Guide

Version

V3R3

CCIs

CCI-001443

Discussion

Allowing devices and users to connect to the system without first authenticating them allows untrusted access and can lead to a compromise or attack. Wireless technologies include, for example, microwave, packet radio (UHF/VHF), 802.11x, and Bluetooth. Wireless networks use authentication protocols (e.g., EAP/TLS, PEAP), which provide credential protection and mutual authentication. This requirement applies to those operating systems that control wireless devices.

Check Content

Verify the operating system protects wireless access to the system using authentication of users and/or devices. If it does not, this is a finding.

Fix Text

Configure the operating system to protect wireless access to the system using authentication of users and/or devices.