Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
DoD network users authorized to remotely connect to a DoD network from a residential WLAN must configure the access point with a strong pre-shared key (PSK) passcode.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-30358 | WIR0931 | SV-40013r1_rule | ECWN-1 | Medium |
| Description |
|---|
| If the passcode is weak, then an adversary is more likely to crack it. Once an adversary obtains the passcode, the adversary can use the passcode access to gain access to WLAN and potentially other networks to which it is attached. |
| STIG | Date |
|---|---|
| PDA/Smartphone Security Technical Implementation Guide | 2011-10-07 |
Details
| Check Text ( C-39023r1_chk ) |
|---|
| Interview the IAO to determine that the site is providing guidance to users on the selection of an appropriate passcode. Mark as a finding if no such guidance is provided or if the guidance provided does not adequately cover the passcode requirements. |
| Fix Text (F-34113r1_fix) |
|---|
| Provide users with appropriate guidance on using strong passcodes to generate the WLAN PSK. |