The network device must authenticate devices before establishing wireless network connections using bidirectional authentication between cryptography-based devices.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
SRG-NET-000150-NDM-NA	SRG-NET-000150-NDM-NA	SRG-NET-000150-NDM-NA_rule		Medium

Description
This requirement is for device to device authentication between wireless network devices and the network device. Without authentication, an unauthorized device may connect to the network device and intercept monitored traffic, make configuration changes, or initiate man-in-the-middle attacks. Hence, it is imperative that authentication is bidirectional (mutual authentication) using cryptography to ensure a high level of trust and authenticity. Device authentication requires unique identification and authentication that may be defined by type, by specific device, or by a combination of type and device as deemed appropriate by the organization. Wireless device authentication is not a functionality of network device management.

Description

This requirement is for device to device authentication between wireless network devices and the network device. Without authentication, an unauthorized device may connect to the network device and intercept monitored traffic, make configuration changes, or initiate man-in-the-middle attacks. Hence, it is imperative that authentication is bidirectional (mutual authentication) using cryptography to ensure a high level of trust and authenticity. Device authentication requires unique identification and authentication that may be defined by type, by specific device, or by a combination of type and device as deemed appropriate by the organization. Wireless device authentication is not a functionality of network device management.

STIG	Date
Network Device Management Security Requirements Guide	2013-07-30

Details

Check Text ( C-SRG-NET-000150-NDM-NA_chk )
This requirement is NA for network device management.

Fix Text (F-SRG-NET-000150-NDM-NA_fix)
This requirement is NA for network device management.