A network attached KVM switch must not be attached to ISs of different classification levels.

From Keyboard Video and Mouse Switch STIG

Part of Network KVM ISs of different classification levels

Associated with IA controls: ECIC-1

SV-6917r2_rule A network attached KVM switch must not be attached to ISs of different classification levels.

Vulnerability discussion

Because of the problems inherent in the spanning of networks of different classification levels, network attached KVM switches will not be attached to ISs of different classification levels. This can lead to the compromise of sensitive data.The ISSO will ensure the network attached KVM switches are not attached to ISs of different classification levels.

Check content

The reviewer will interview the ISSO to verify that a network attached KVM switch is not attached to ISs of different classification levels. If a network attached KVM is attached to ISs of different classification levels, this is a finding.

Fix text

Remove all ISs from the network attached KVM switch that have a classification level that is different from the classification level of the network the KVM switch is attached to. Use a new network attached KVM switch for each IS classification level that you removed from the original KVM switch. Attach the KVM switch to a network that has the same classification level as the ISs that have been attach to the KVM switch.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.