Summary

The management of wireless access points must be enabled for only one of the equipment's physical ports.

Description

Limiting the management interface to a specific physical port contributes to a more granula access control. Access permissions and restrictions can be applied at the network level, ensuring that only authorized personnel or devices can access to the management interface.

References

• NERCCIP-007-6_R1_1. Ports and services
• PADSS-6_1. The wireless technology must be implemented securely
• CMMC-AC_L2-3_1_14. Remote access routing
• CMMC-AC_L2-3_1_17. Wireless access protection
• CMMC-PE_L1-3_10_1. Limit physical access
• CMMC-SC_L1-3_13_1. Boundary protection
• HITRUST-01_i. Policy on the use of network services
• HITRUST-01_l. Remote diagnostic and configuration port protection
• HITRUST-01_o. Network routing control
• HITRUST-08_c. Securing offices, rooms and facilities
• HITRUST-08_f. Public access, delivery and loading areas
• HITRUST-08_g. Equipment siting and protection
• FEDRAMP-SC-8_1. Cryptographic or alternate physical protection
• ISO27002-8_21. Security of network services
• IEC62443-UC-2_2. Wireless use control
• OSSTMM3-9_5_5. Wireless security (access verification) - Access control
• OSSTMM3-9_7_3. Wireless security (controls verification) - Privacy
• ISSAF-L_4_3. Network security - WLAN security (audit and review)
• PTES-5_2_2_1. Vulnerability analysis - Network vulnerability scanners (port based)
• C2M2-9_2_c. Implement network protections for cybersecurity architecture
• SIG-N_1_4. Network security
• ISO27001-8_21. Security of network services