Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-25400 | HMC0220 | SV-31580r1_rule | EBRP-1 EBRU-1 | High |
Description |
---|
Failure to securely connect to remote sites can leave systems open to multiple attacks and security violations through the network. Failure to securely implement remote support connections can lead to unauthorized access or denial of service attacks on the Hardware Management Console. |
STIG | Date |
---|---|
IBM HARDWARE MANAGEMENT CONSOLE (HMC) STIG | 2014-04-10 |
Check Text ( C-31840r1_chk ) |
---|
Have the Network Security Engineer check, that the remote Internet connection for IBM RSF support has met the requirements of the Secure Remote Computing STIG. |
Fix Text (F-28340r1_fix) |
---|
Have the Network Security Officer run a Secure Remote Computing STIG SRR against the HMC and validate that it meets the requirements stipulated in the STIG. |