CSCv6|15.4

Title

Where a specific business need for wireless access has been identified, configure wireless access on client machines to allow access only to authorized wireless networks.

Description

Where a specific business need for wireless access has been identified, configure wireless access on client machines to allow access only to authorized wireless networks. For devices that do not have an essential wireless business purpose, disable wireless access in the hardware configuration (basic input/output system or extensible firmware interface).

Reference Item Details

Category: Wireless Access Control

Family: Network

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.7 Do not connect to untrusted Wi-Fi networksMDMAirWatch - CIS Google Android v1.3.0 L2
1.7 Do not connect to untrusted Wi-Fi networksMDMMobileIron - CIS Google Android v1.3.0 L2
1.22 Ensure 'Wi-Fi assistant' is set to 'Disabled'MDMMobileIron - CIS Google Android v1.3.0 L1
1.22 Ensure 'Wi-Fi assistant' is set to 'Disabled'MDMAirWatch - CIS Google Android v1.3.0 L1
3.6 Ensure wireless interfaces are disabledUnixCIS Distribution Independent Linux Workstation L2 v2.0.0
3.6 Ensure wireless interfaces are disabledUnixCIS Debian 8 Server L1 v2.0.2
3.6 Ensure wireless interfaces are disabledUnixCIS Distribution Independent Linux Server L1 v2.0.0
3.6 Ensure wireless interfaces are disabledUnixCIS Debian 8 Workstation L2 v2.0.2
3.7 Ensure wireless interfaces are disabledUnixCIS Ubuntu Linux 14.04 LTS Workstation L2 v2.1.0
3.7 Ensure wireless interfaces are disabledUnixCIS Ubuntu Linux 14.04 LTS Server L1 v2.1.0
3.7 Ensure wireless interfaces are disabledUnixCIS Ubuntu Linux 18.04 LXD Host L1 Server v1.0.0
18.5.20.1 (L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' - DisableFlashConfigRegistrarWindowsCIS Microsoft Windows 8.1 v2.4.1 L2 Bitlocker
18.5.20.1 (L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' - DisableFlashConfigRegistrarWindowsCIS Microsoft Windows 8.1 v2.4.1 L2
18.5.20.1 (L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' - DisableInBand802DOT11RegistrarWindowsCIS Microsoft Windows 8.1 v2.4.1 L2
18.5.20.1 (L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' - DisableInBand802DOT11RegistrarWindowsCIS Microsoft Windows 8.1 v2.4.1 L2 Bitlocker
18.5.20.1 (L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' - DisableUPnPRegistrarWindowsCIS Microsoft Windows 8.1 v2.4.1 L2 Bitlocker
18.5.20.1 (L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' - DisableUPnPRegistrarWindowsCIS Microsoft Windows 8.1 v2.4.1 L2
18.5.20.1 (L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' - DisableWPDRegistrarWindowsCIS Microsoft Windows 8.1 v2.4.1 L2
18.5.20.1 (L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' - DisableWPDRegistrarWindowsCIS Microsoft Windows 8.1 v2.4.1 L2 Bitlocker
18.5.20.1 (L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' - EnableRegistrarsWindowsCIS Microsoft Windows 8.1 v2.4.1 L2
18.5.20.1 (L2) Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' - EnableRegistrarsWindowsCIS Microsoft Windows 8.1 v2.4.1 L2 Bitlocker
18.5.20.1 Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' - DisableFlashConfigRegistrarWindowsCIS Windows 7 Workstation Level 2 v3.2.0
18.5.20.1 Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' - DisableFlashConfigRegistrarWindowsCIS Windows 7 Workstation Level 2 + Bitlocker v3.2.0
18.5.20.1 Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' - DisableInBand802DOT11RegistrarWindowsCIS Windows 7 Workstation Level 2 v3.2.0
18.5.20.1 Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' - DisableInBand802DOT11RegistrarWindowsCIS Windows 7 Workstation Level 2 + Bitlocker v3.2.0
18.5.20.1 Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' - DisableUPnPRegistrarWindowsCIS Windows 7 Workstation Level 2 v3.2.0
18.5.20.1 Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' - DisableUPnPRegistrarWindowsCIS Windows 7 Workstation Level 2 + Bitlocker v3.2.0
18.5.20.1 Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' - DisableWPDRegistrarWindowsCIS Windows 7 Workstation Level 2 v3.2.0
18.5.20.1 Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' - DisableWPDRegistrarWindowsCIS Windows 7 Workstation Level 2 + Bitlocker v3.2.0
18.5.20.1 Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' - EnableRegistrarsWindowsCIS Windows 7 Workstation Level 2 + Bitlocker v3.2.0
18.5.20.1 Ensure 'Configuration of wireless settings using Windows Connect Now' is set to 'Disabled' - EnableRegistrarsWindowsCIS Windows 7 Workstation Level 2 v3.2.0
18.5.20.2 (L2) Ensure 'Prohibit access of the Windows Connect Now wizards' is set to 'Enabled'WindowsCIS Microsoft Windows 8.1 v2.4.1 L2
18.5.20.2 (L2) Ensure 'Prohibit access of the Windows Connect Now wizards' is set to 'Enabled'WindowsCIS Microsoft Windows 8.1 v2.4.1 L2 Bitlocker
18.5.20.2 Ensure 'Prohibit access of the Windows Connect Now wizards' is set to 'Enabled'WindowsCIS Windows 7 Workstation Level 2 v3.2.0
18.5.20.2 Ensure 'Prohibit access of the Windows Connect Now wizards' is set to 'Enabled'WindowsCIS Windows 7 Workstation Level 2 + Bitlocker v3.2.0
Ensure wireless interfaces are disabledUnixTenable Cisco Firepower Management Center OS Best Practices Audit