The network attached KVM switch must not be attached to a network that is not at the same classification level as the ISs attached.

From Keyboard Video and Mouse Switch STIG

Part of Network KVM classification of network

Associated with IA controls: ECIC-1

SV-6901r2_rule The network attached KVM switch must not be attached to a network that is not at the same classification level as the ISs attached.

Vulnerability discussion

If a network attached KVM switch is attached to a network of a different classification level than the ISs attached to the KVM switch, this could lead to a compromise of sensitive data either on the network or on the ISs.The ISSO will ensure network attached KVM switches are only connected to a network at the same classification level as the ISs attached.

Check content

The reviewer will interview the ISSO to verify that a network attached KVM switch is attached to a network of the same classification level as the ISs attached. If the network KVM is attached to a network that is not at the same classification level as the attached ISs, then this is a finding.

Fix text

Remove the KVM switch from the network when the network KVM switch is attached to a network at a different classification level than the attached ISs. Attach the KVM switch to a network of the appropriate classification level.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.