The password configured on the WLAN access point for key generation and client access must be set to a 15-character or longer complex password as required by USCYBERCOM CTO 07-15 Rev1.
An XCCDF Rule
Description
If the organization does not use a strong passcode for client access, an adversary is significantly more likely to be able to obtain it. Once this occurs, the adversary may be able to obtain full network access, obtain DoD sensitive information, and attack other DoD information systems.
- ID
- SV-243134r879601_rule
- Version
- WLAN-ND-000100
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Configure the key generation password on the WLAN Access Point to a 15-character or longer complex password on access points that do not use AAA servers for authentication.