Preface on Sub-Control 15.7

There are 3 plugins that can assist with this configuration setting. Each plugin provides information that helps with assessing the wireless configuration. Using the output from these plugins, the organization can identify systems with no encryption enabled for SSID’s. By using regular expressions strings like “Encryption : AES” or “Encryption : none” can be matched.

• Windows Wireless SSID (WMI) [25197]

• Mac OS X Wireless Networks List [63340]

• Microsoft Windows Wireless Network History [66350]

Listed below are the regular expressions used to find the different settings.

• AES Configure Only: ^(?!.*Encryption : none)(?=.*AES).*$

• Other Encryption Settings: ^(?!.*Encryption : none)(?!.*Encryption : AES).*$

• No Encryption Enabled: ^(?!.*Encryption).*$ = NO ENCRYPTION