Control Strategy NetworkEAP.PSK

URI: CSG-NetworkEAP-PSK

Package: Network

< prev | next >

Description: Control access to subnet LogicalSubnet using a pre-shared key. This is installed at the device Gateway providing the network, which also verifies that supplicants have the same key, preventing unauthorised access. You should also specify shared keys for supplicant devices or they will be unable to connect.

Blocked Threats (3)

LS.L.RSSH-P.3

Access to subnet LogicalSubnet from space Space: someone with access to space Space where radio subnet LogicalSubnet is accessible can connect their own device unless access is restricted by security measures. Note that access only to the local subnet serving Space.

LS.L.WSSH-P.3

Access to subnet LogicalSubnet from space Space: someone with access to space Space where wired subnet LogicalSubnet has connections can connect their own device unless access is restricted by security measures.

LS.L.VSPSH-P.3

Access to virtual subnet LogicalSubnet via physical network PhysicalSubnet: if an attacker has access to physical subnet PhysicalSubnet, they connect to virtual subnet LogicalSubnet routed over PhysicalSubnet, unless prevented by security measures.

Triggers Threats (4)

I.A.GdHRS.6

Device Host unable to connect to radio subnet LogicalSubnet from Space: if access to network subnet LogicalSubnet is restricted, device Host will be unable to connect if it does not have the necessary credentials.

I.A.GdHRSi.6

Device Host unable to connect to radio subnet LogicalSubnet: if access to network subnet LogicalSubnet is restricted, device Host will be unable to connect if it does not have the necessary credentials.

I.A.GdHVS.6

Device Host unable to connect to virtual subnet LogicalSubnet: if access to network subnet LogicalSubnet is restricted, device Host will be unable to connect if it does not have the necessary credentials.

I.A.GdHWS.6

Device Host unable to connect to wired subnet LogicalSubnet: if access to network subnet LogicalSubnet is restricted, device Host will be unable to connect if it does not have the necessary credentials.