Control Strategy NetworkEAP.TLS.Client

URI: CSG-NetworkEAP-TLS-Client

Description: If subnet LogicalSubnet uses a EAP.TLS to control access, supplicant device Host can connect if it has an X509 certified (or similarly trusted) asymmetric key pair.

(empty)

I.A.GdHRS.6

Device Host unable to connect to radio subnet LogicalSubnet from Space: if access to network subnet LogicalSubnet is restricted, device Host will be unable to connect if it does not have the necessary credentials.

I.A.GdHRSi.6

Device Host unable to connect to radio subnet LogicalSubnet: if access to network subnet LogicalSubnet is restricted, device Host will be unable to connect if it does not have the necessary credentials.

I.A.GdHWS.6

Device Host unable to connect to wired subnet LogicalSubnet: if access to network subnet LogicalSubnet is restricted, device Host will be unable to connect if it does not have the necessary credentials.

I.A.GdHVS.6

Device Host unable to connect to virtual subnet LogicalSubnet: if access to network subnet LogicalSubnet is restricted, device Host will be unable to connect if it does not have the necessary credentials.

(empty)

X509ClientVerifier at Role_Gateway

X509 at Role_Gateway

X509 at Role_Host

Control Strategy NetworkEAP.TLS.Client

Mitigated Threats (0)

Blocked Threats (4)

I.A.GdHRS.6

I.A.GdHRSi.6

I.A.GdHWS.6

I.A.GdHVS.6

Triggers Threats (0)

Control Sets (3)