Wireless network adapters must be turned off when the system is connected to a wired network.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-72573	WIN00-000200	SV-87203r1_rule		Medium

Description
If a client device supports simultaneous use of wireless and wired connections, then this increases the probability that an adversary who can access the device using its wireless interface can then route traffic through the device’s wired interface to attack devices on the wired network or obtain sensitive DoD information.

STIG	Date
Windows 7 Security Technical Implementation Guide	2018-02-12

Details

Check Text ( C-72767r1_chk )
This is NA for systems that do not have wireless network adapters. Disabling of wired network adapters can be accomplished through various means. Third-party software that manages this is the most reliable solution. Some network adapters may have a configuration option to address this locally. At minimum, the organization must have a policy that users turn off wireless network adapters when connected to a wired network. If wireless network adapters are not turned off when the system is connected to a wired network, this is a finding.

Check Text ( C-72767r1_chk )

This is NA for systems that do not have wireless network adapters.

Disabling of wired network adapters can be accomplished through various means. Third-party software that manages this is the most reliable solution. Some network adapters may have a configuration option to address this locally. At minimum, the organization must have a policy that users turn off wireless network adapters when connected to a wired network.

If wireless network adapters are not turned off when the system is connected to a wired network, this is a finding.

Fix Text (F-78973r1_fix)
Configure systems to turn off wireless network adapters when systems are connected to wired networks. If this is not possible, develop and implement a policy that users must turn off wireless network adapters when systems are connected to wired networks.