Control Strategy NetworkEAP.TLS

URI: CSG-NetworkEAP-TLS

Package: Network

< prev | next >

Description: Control access to subnet LogicalSubnet using authentication via X509 or otherwise trusted public-private key pairs. The gateway device Gateway providing the network has an (X509 certified) key, and a means to verify (X509 certified) keys registered by authorised supplicants. You should also specify that supplicant devices have (X509 certified) key pairs or they will be unable to connect.

Blocked Threats (3)

LS.L.RSSH-P.3

Access to subnet LogicalSubnet from space Space: someone with access to space Space where radio subnet LogicalSubnet is accessible can connect their own device unless access is restricted by security measures. Note that access only to the local subnet serving Space.

LS.L.WSSH-P.3

Access to subnet LogicalSubnet from space Space: someone with access to space Space where wired subnet LogicalSubnet has connections can connect their own device unless access is restricted by security measures.

LS.L.VSPSH-P.3

Access to virtual subnet LogicalSubnet via physical network PhysicalSubnet: if an attacker has access to physical subnet PhysicalSubnet, they connect to virtual subnet LogicalSubnet routed over PhysicalSubnet, unless prevented by security measures.

Triggers Threats (4)

I.A.GdHRS.6

Device Host unable to connect to radio subnet LogicalSubnet from Space: if access to network subnet LogicalSubnet is restricted, device Host will be unable to connect if it does not have the necessary credentials.

I.A.GdHRSi.6

Device Host unable to connect to radio subnet LogicalSubnet: if access to network subnet LogicalSubnet is restricted, device Host will be unable to connect if it does not have the necessary credentials.

I.A.GdHVS.6

Device Host unable to connect to virtual subnet LogicalSubnet: if access to network subnet LogicalSubnet is restricted, device Host will be unable to connect if it does not have the necessary credentials.

I.A.GdHWS.6

Device Host unable to connect to wired subnet LogicalSubnet: if access to network subnet LogicalSubnet is restricted, device Host will be unable to connect if it does not have the necessary credentials.