SWLAN access points must implement MAC filtering.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-30359	WIR0226	SV-40014r1_rule	ECWN-1	Low

Description
Medium access control (MAC) filtering is a mechanism for ensuring that only authorized devices connect to the WLAN. While there are other methods to achieve similar protection with greater assurance, MAC filtering can be employed as a defense-in-depth measure.

STIG	Date
L3 KOV-26 Talon (Wireless Role) Security Technical Implementation Guide	2011-10-07

Details

Check Text ( C-39028r1_chk )
Detailed Policy Requirements: MAC filtering must be implemented to enable the SWLAN AP to perform client device access control. Check Procedures: Verify MAC address filtering has been implemented on site SWLAN access points. Have the system administrator log into a sample of site SWLAN access points (2-3 devices) and show MAC address filtering has been enabled. Mark as a finding if MAC filtering has not been enabled.

Check Text ( C-39028r1_chk )

Detailed Policy Requirements:

MAC filtering must be implemented to enable the SWLAN AP to perform client device access control.

Check Procedures:

Verify MAC address filtering has been implemented on site SWLAN access points. Have the system administrator log into a sample of site SWLAN access points (2-3 devices) and show MAC address filtering has been enabled.
Mark as a finding if MAC filtering has not been enabled.

Fix Text (F-34123r1_fix)
Implement MAC filtering on the SWLAN access point.