STIGhubSTIGhub
STIGsSearchCompare

STIGhub

A free tool to search and browse the entire DISA STIG library. Saves up to 75% in security compliance research time.

Navigation

  • Browse STIGs
  • Search
  • Compare Versions

Resources

  • About
  • Release Notes
  • VPAT
  • DISA STIG Library
STIGs updated 5 hours ago
Powered by Pylon
© 2026 Beacon Cloud Solutions, Inc. All rights reserved.
← Back to STIGs

Network WLAN Bridge Management Security Technical Implementation Guide

Version

V7R2

Release Date

Sep 13, 2023

SCAP Benchmark ID

Network_WLAN_Bridge_Mgmt_STIG

Total Checks

18

Tags

network
CAT I: 6CAT II: 12CAT III: 0

This Security Technical Implementation Guide is published as a tool to improve the security of Department of Defense (DoD) information systems. The requirements are derived from the National Institute of Standards and Technology (NIST) 800-53 and related documents. Comments or proposed revisions to this document should be sent via email to the following address: disa.stig_spt@mail.mil.

Export CKLExport CSVExport JSONDownload STIG ZIP

Checks (18)

V-243171MEDIUMThe network device must enforce a minimum 15-character password length.V-243172MEDIUMThe network device must not have any default manufacturer passwords when deployed.V-243173MEDIUMThe network device must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the device.V-243174HIGHThe network device must terminate all network connections associated with a device management session at the end of the session, or the session must be terminated after 10 minutes of inactivity except to fulfill documented and validated mission requirements.V-243175MEDIUMThe network device must be configured to authenticate each administrator prior to authorizing privileges based on assignment of group or role.V-243176HIGHThe network device must enforce the assigned privilege level for each administrator and authorizations for access to all commands relative to the privilege level in accordance with applicable policy for the device.V-243177HIGHThe network device must be configured to implement cryptographic mechanisms using a FIPS 140-2 approved algorithm to protect the confidentiality of remote maintenance sessions.V-243178MEDIUMThe network device must generate audit records when successful/unsuccessful logon attempts occur.V-243179HIGHThe network device must be running an operating system release that is currently supported by the vendor.V-243180HIGHThe network device must be configured to use an authentication server to authenticate users prior to granting administrative access.V-243181MEDIUMThe network device must be configured to authenticate SNMP messages using a FIPS-validated Keyed-Hash Message Authentication Code (HMAC).V-243182MEDIUMThe network device must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable.V-243183MEDIUMThe network device must be configured to enforce the limit of three consecutive invalid logon attempts, after which time it must block any login attempt for 15 minutes.V-243184HIGHThe network device must be configured to prohibit the use of all unnecessary and/or nonsecure functions, ports, protocols, and/or services.V-243185MEDIUMThe network device must authenticate Network Time Protocol (NTP) sources using authentication that is cryptographically based.V-243186MEDIUMThe network device must implement replay-resistant authentication mechanisms for network access to privileged accounts.V-243187MEDIUMThe network device must be configured with both an ingress and egress ACL.V-243188MEDIUMThe network device must be configured to synchronize internal information system clocks using redundant authoritative time sources.