Checklist Summary:

The HPE Aruba Networking AOS Security Technical Implementation Guide (STIG) is published as a tool to improve the security of Department of Defense (DOD) information systems. This document is meant for use in conjunction with other STIGs, such as the Network Infrastructure Policy STIG, and DOD Information Network (DODIN) Approved Products List (APL) Military Unique Deployment Guide. HPE Aruba Networking has partnered with the DOD in deploying and serving mission-critical networks for more than 18 years. During this partnership, HPE Aruba Networking has been focused on certifying its wireless local area network (WLAN) and virtual private network (VPN) for the Federal Information Processing Standard (FIPS), Common Criteria, DODIN, and the U.S. Government IPv6 (USGv6). HPE Aruba will continue to support the DOD in mission-critical network deployments. AOS is the operating system for Aruba Mobility Conductors, Mobility Controllers, and controller-managed access points. With an extensive set of integrated technologies and capabilities, AOS delivers unified wired and wireless access, seamless roaming, enterprise-grade security, and a highly available network with the required performance, user experience, and reliability to support high-density environments. Backed by industry-leading software-innovation, AOS is engineered to deliver enterprise-class performance and mission-critical reliability for customer networks of all sizes. Unique Aruba features include per-user policy enforcement, granular application visibility and control, and patented radio frequency (RF) optimization technologies. AOS also allows Aruba local area network (LAN) and wide area network (WAN) infrastructure to leverage WLAN features to extend role-based enforcement, simplify VLAN management, and dynamically segment Internet of Things (IoT) devices and clients across the entire network.

Checklist Role:

• Server Operating System

Known Issues:

Not provided.

Target Audience:

Not provided.

Target Operational Environment:

• Specialized Security-Limited Functionality (SSLF)

Testing Information:

Not provided.

Regulatory Compliance:

This document is provided under the authority of DODI 8500.01.

Comments/Warnings/Miscellaneous:

Not provided.

Disclaimer:

DISA accepts no liability for the consequences of applying specific configuration settings made on the basis of the SRGs/STIGs. It must be noted that the configuration settings specified should be evaluated in a local, representative test environment before implementation in a production environment, especially within large user populations. The extensive variety of environments makes it impossible to test these configuration settings for all potential software configurations

Product Support:

Not provided.

Point of Contact:

disa.stig_spt@mail.mil

Sponsor:

Not provided.

Licensing:

Not provided.

Change History:

Initial Candidate Submission - 01/10/2025

Dependency/Requirements:

URL	Description

References:

Reference URL	Description

NIST checklist record last modified on 01/10/2025