The organization must protect non-local maintenance sessions by separating the maintenance session from other network sessions with the information system by either physically separated communications paths; or logically separated communications paths based upon encryption.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-26950 | SRG-APP-NA | SV-34233r1_rule | Medium |
| Description |
|---|
| This is a requirement that maintenance needs to be done on a separate interface or encrypted channel to segment maintenance activity from regular usage. This does not address an application characteristic and does not apply. |
| STIG | Date |
|---|---|
| Application Security Requirements Guide | 2011-12-28 |
Details
| Check Text ( None ) |
|---|
| None |
| Fix Text (None) |
|---|
| None |