Unused USB ports on the KVM switch are not blocked with tamper resistant on a KVM switch that can encapsulate and send the USB protocol over the network to the client.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-6715	KVM03.011.00	SV-6915r1_rule	DCBP-1	Medium

Description

By blocking the unused USB ports on the network attached KVM switch that can encapsulate USB over IP with tamper resistant seals we will have an indication if someone has attached an unauthorized USB connection to the KVM switch. When a broke seal if found it should be investigated. The IAO will ensure that the USB ports on the KVM switch are blocked with tamper resistant seals if no USB connections are made to a KVM switch that can encapsulate and send the USB protocol over the network to the client

STIG	Date
Keyboard Video and Mouse Switch STIG	2014-08-04

Details

Check Text ( C-2731r1_chk )
iIf the KVM switch can encrypt USB and send it over the network, the reviewer will view the KVM switch and verify that unused USB ports are blocked with tamper resistant seals.

Fix Text (F-6322r1_fix)
Block unused USB ports on a network attached KVM switch that can encapsulate USB over IP with tamper resistant seals.