STIGQter: STIG Summary: WLAN Controller Security Technical Implementation Guide (STIG) Version: 6 Release: 15 Benchmark Date: 26 Apr 2019:

Network devices must use two or more authentication servers for the purpose of granting administrative access.

DISA Rule

SV-16259r4_rule

Vulnerability Number

V-15432

Group Title

The device is not authenticated using a AAA server.

Rule Version

NET0433

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Configure the device to use two separate authentication servers.

Check Contents

Verify an authentication server is required to access the device and that there are two or more authentication servers defined.

If the device is not configured for two separate authentication servers, this is a finding.

Vulnerability Number

V-15432

Documentable

False

Rule Version

NET0433

Severity Override Guidance

Verify an authentication server is required to access the device and that there are two or more authentication servers defined.

If the device is not configured for two separate authentication servers, this is a finding.

Check Content Reference

M

Responsibility

Information Assurance Officer

Target Key

1538

Comments