Skip to content

I - Mission Critical Public

Rules and Groups employed by this XCCDF Profile

  • SRG-NET-000070

    Group
  • WLAN EAP-TLS implementation must use certificate-based PKI authentication to connect to DoD networks.

    DoD certificate-based PKI authentication is strong, two-factor authentication that relies on carefully evaluated cryptographic modules. Implementations of EAP-TLS that are not integrated with certi...
    Rule Medium Severity
  • SRG-NET-000384

    Group
  • WLAN signals must not be intercepted outside areas authorized for WLAN access.

    Most commercially available WLAN equipment is preconfigured for signal power appropriate to most applications of the WLAN equipment. In some cases, this may permit the signals to be received outsid...
    Rule Low Severity
  • SRG-NET-000512

    Group
  • Wireless access points and bridges must be placed in dedicated subnets outside the enclave's perimeter.

    If an adversary is able to compromise an access point or controller that is directly connected to an enclave network, the adversary can easily surveil and attack other devices from that beachhead. ...
    Rule Medium Severity
  • SRG-NET-000205

    Group
  • The network device must be configured to only permit management traffic that ingresses and egresses the out-of-band management (OOBM) interface.

    The OOBM access switch will connect to the management interface of the managed network elements. The management interface can be a true OOBM interface or a standard interface functioning as the man...
    Rule Medium Severity
  • SRG-NET-000131

    Group
  • The network device must not be configured to have any feature enabled that calls home to the vendor.

    Call-home services will routinely send data such as configuration and diagnostic information to the vendor for routine or emergency analysis and troubleshooting. There is a risk that transmission o...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules