Unused USB ports on the KVM switch are not blocked with tamper resistant on a KVM switch that can encapsulate and send the USB protocol over the network to the client.

From Keyboard, Video, Mouse Switch Security STIG

Part of Network KVM Unused USB Ports Tamper Seals

Associated with IA controls: DCBP-1

SV-6915r1_rule Unused USB ports on the KVM switch are not blocked with tamper resistant on a KVM switch that can encapsulate and send the USB protocol over the network to the client.

Vulnerability discussion

By blocking the unused USB ports on the network attached KVM switch that can encapsulate USB over IP with tamper resistant seals we will have an indication if someone has attached an unauthorized USB connection to the KVM switch. When a broke seal if found it should be investigated.The IAO will ensure that the USB ports on the KVM switch are blocked with tamper resistant seals if no USB connections are made to a KVM switch that can encapsulate and send the USB protocol over the network to the client

Check content

iIf the KVM switch can encrypt USB and send it over the network, the reviewer will view the KVM switch and verify that unused USB ports are blocked with tamper resistant seals.

Fix text

Block unused USB ports on a network attached KVM switch that can encapsulate USB over IP with tamper resistant seals.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.