Tamper resistant seals are not attached to the KVM switch and all IS cables at their attachment points where the KVM switch is attached to ISs of different classification levels.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-6701	KVM02.007.00	SV-6882r1_rule	DCBP-1	Medium

Description
Tamper resistant seals are tape designed to break if tampered with. They are used to indicate that a cabinet has been opened or a cable removed, moved or added. For KVM switches attached to ISs of differing classification levels it is necessary to be aware of any potential tampering with the connections. Switching the cables for two ISs could lead to the compromise of sensitive data. Removal of a cable could lead to a denial of service until it is reattached. The IAO or SA will ensure that tamper resistant seals are attached to the KVM switch and all IS cables at their attachment points.

Description

Tamper resistant seals are tape designed to break if tampered with. They are used to indicate that a cabinet has been opened or a cable removed, moved or added. For KVM switches attached to ISs of differing classification levels it is necessary to be aware of any potential tampering with the connections. Switching the cables for two ISs could lead to the compromise of sensitive data. Removal of a cable could lead to a denial of service until it is reattached. The IAO or SA will ensure that tamper resistant seals are attached to the KVM switch and all IS cables at their attachment points.

STIG	Date
Keyboard Video and Mouse Switch STIG	2014-08-04

Details

Check Text ( C-2678r1_chk )
The reviewer will verify that tamper resistant seals are attached to the KVM switches and to the IS cable attachment points. For cables these seals will be place across the junction between the switch and the cable. For the KVM witch the seals will be placed across the KVM case joints so that opening the case will break the seal.

Fix Text (F-6296r1_fix)
Obtain tamper resistant seals and apply them to the KVM switch case joints so that if the case is open the seal will be broken. Also place them across the junction between the IS cables and the KVM switch so that if a cable is moved or removed the seal will be broken.