There is no up-to-date documentation or diagrams of the Sun Ray infrastructure.

From Sun Ray 4 Policy STIG

Part of No up-to-date documentation or diagrams

Associated with IA controls: DCSW-1

SV-17390r1_rule There is no up-to-date documentation or diagrams of the Sun Ray infrastructure.

Vulnerability discussion

Without current and accurate documentation, any changes to the Sun Ray infrastructure may jeopardize the network’s integrity. To assist in the management, auditing, and security of the network, facility drawings and topology maps are a necessity. Topology maps and documentation are important because they show the overall layout of the network infrastructure and where devices are physically located. They also show the relationship and inter-connectivity between devices and where possible intrusive attacks could take place. If an incident were to occur, the lack of documentation would impact the ability to respond. Additionally, documentation along with diagrams of the network topology are required to be submitted to the Connection Approval Process (CAP) for approval to connect to the NIPRNet or SIPRNet.

Check content

Request a copy of all the Sun Ray infrastructure documentation. Documentation must include all routers, switches, servers (Solaris, Windows), applications (such as Citrix XenApp and Sun Ray Software), Sun Ray Desktop Units, IP addresses, and any third party applications. If the documentation does not include all of these components, this is a finding.

Fix text

Develop up-to-date documentation for the Sun Ray infrastructure.

Pro Tips

Powered by sagemincer