The network element must authenticate devices before establishing wireless network connections using bidirectional authentication between cryptographically based devices.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
SRG-NET-000150-FW-NA	SRG-NET-000150-FW-NA	SRG-NET-000150-FW-NA_rule		Medium

Description
This requirement is for device to device authentication between wireless network devices and the firewall. Without authentication, an unauthorized device may connect to the firewall and intercept monitored traffic, make configuration changes, or initiate man-in-the-middle attacks. Hence, it is imperative that authentication is bi-directional (mutual authentication) using cryptography to ensure a high level of trust and authenticity. Device authentication requires unique identification and authentication that may be defined by type, by specific device, or by a combination of type and device as deemed appropriate by the organization. Wireless device authentication is not a functionality of the firewall.

Description

This requirement is for device to device authentication between wireless network devices and the firewall. Without authentication, an unauthorized device may connect to the firewall and intercept monitored traffic, make configuration changes, or initiate man-in-the-middle attacks. Hence, it is imperative that authentication is bi-directional (mutual authentication) using cryptography to ensure a high level of trust and authenticity. Device authentication requires unique identification and authentication that may be defined by type, by specific device, or by a combination of type and device as deemed appropriate by the organization. Wireless device authentication is not a functionality of the firewall.

STIG	Date
Firewall Security Requirements Guide	2012-12-10

Details

Check Text ( C-SRG-NET-000150-FW-NA_chk )
This requirement is NA for firewall. No fix required.

Fix Text (F-SRG-NET-000150-FW-NA_fix)
This requirement is NA for firewall. No fix required.