3.6 Ensure wireless interfaces are disabled

Information

Wireless networking is used when wired networks are unavailable. Debian contains a wireless tool kit to allow system administrators to configure and use wireless networks.

Rationale:

If wireless is not to be used, wireless devices can be disabled to reduce the potential attack surface.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Run the following command to disable any wireless interfaces:

# ip link set <interface> down

Disable any wireless interfaces in your network configuration.

Impact:

Many if not all laptop workstations and some desktop workstations will connect via wireless requiring these interfaces be enabled.

See Also

https://workbench.cisecurity.org/files/2619

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-18(3), CSCv6|15.8, CSCv7|15.4

Plugin: Unix

Control ID: f64c2ec4907e31b7e9cbbc3879660d1e77afcd210322799e4c987dfd743a4dbd