A network attached KVM switch used to administer ISs must be attached to an out-of-band network.

From Keyboard Video and Mouse Switch STIG

Part of Network KVM used to administer not out-of-band

Associated with IA controls: DCBP-1

SV-6900r2_rule A network attached KVM switch used to administer ISs must be attached to an out-of-band network.

Vulnerability discussion

If a network attached KVM switch is attached to an out-of-band network there is less opportunity for a malicious user to compromise the interface and create a denial of service by issuing disruptive commands to a server.The ISSO or SA will ensure a network attached KVM switch used to administer ISs is connected to an out-of-band network.

Check content

The reviewer will interview the ISSO or SA to verify that a network attached KVM switch used to administer ISs is connected to an out of band network. If a network attached KVM used to administer ISs is not connected to an out-of-band network, this is a finding.

Fix text

Develop a plan that will attach all network attached KVM switches used to administer ISs to an out-of-band network. Obtain CM approval and implement the plan.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.