The KVM switch is configured to encapsulate and send USB connections other than KVM connections.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-6714	KVM03.010.00	SV-6911r1_rule	DCBP-1	High

Description
Some network attached KVM switched can encapsulate USB connections other than the keyboard, video monitor, and mouse connections. This connection could be a disk drive connection and could allow the transfer of data between the ISs attached to the KVM switch and the client system attached via IP to the KVM switch leading to a compromise of sensitive data. The IAO or SA will ensure that the KVM switch is not configured to encapsulate and send USB connections other than KVM connections.

Description

Some network attached KVM switched can encapsulate USB connections other than the keyboard, video monitor, and mouse connections. This connection could be a disk drive connection and could allow the transfer of data between the ISs attached to the KVM switch and the client system attached via IP to the KVM switch leading to a compromise of sensitive data. The IAO or SA will ensure that the KVM switch is not configured to encapsulate and send USB connections other than KVM connections.

STIG	Date
Keyboard Video and Mouse Switch STIG	2014-08-04

Details

Check Text ( C-2727r1_chk )
The reviewer will, with the assistance of the IAO or SA, verify that the KVM switch is not configured to encapsulate and send USB connections other than KVM connections.

Fix Text (F-6321r1_fix)
Reconfigure the network KVM switch so that it will not encapsulate USB connections other than the keyboard, video monitor, or mouse, over IP.