WLAN equipment obtained through acquisition programs must be JITC interoperability certified.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-14004	WIR0130	SV-14615r6_rule	ECWN-1	Low

Description
Interoperability certification assures that warfighters can communicate effectively in joint, combined, coalition, and interagency environments. There is some degree of risk that systems without JITC certification will fail to interoperate. WLAN equipment is also required to be WPA2 certified (verified in another check procedure), which also provides significant interoperability assurance. The Wi-Fi Alliance WPA2 certification is not granted unless the product also has a radio subsystem compliant with the IEEE 802.11a, b, g, or n specifications. Products are tested with many other products to ensure interoperability.

Description

Interoperability certification assures that warfighters can communicate effectively in joint, combined, coalition, and interagency environments. There is some degree of risk that systems without JITC certification will fail to interoperate. WLAN equipment is also required to be WPA2 certified (verified in another check procedure), which also provides significant interoperability assurance. The Wi-Fi Alliance WPA2 certification is not granted unless the product also has a radio subsystem compliant with the IEEE 802.11a, b, g, or n specifications. Products are tested with many other products to ensure interoperability.

STIG	Date
WLAN Access Point (Internet Gateway Only Connection) Security Technical Implementation Guide	2011-10-07

Details

Check Text ( C-11469r5_chk )
Detailed policy Requirements: All systems obtained through an acquisition program must be JTIC certified before they are fielded. Fielded systems must be recertified every four years or after any changes that may affect interoperability. Check Procedures: - Verify the WLAN system has been certified by the JITC as meeting end-to-end interoperability. - Mark as a finding if the WLAN was implemented as part of an acquisition program and does not have JITC certification.

Check Text ( C-11469r5_chk )

Detailed policy Requirements:
All systems obtained through an acquisition program must be JTIC certified before they are fielded. Fielded systems must be recertified every four years or after any changes that may affect interoperability.
Check Procedures:

- Verify the WLAN system has been certified by the JITC as meeting end-to-end interoperability.
- Mark as a finding if the WLAN was implemented as part of an acquisition program and does not have JITC certification.

Fix Text (F-13491r3_fix)
Acquire JITC-certified WLAN equipment.