A network attached KVM switch is attached to ISs of different classification levels.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-6717	KVM03.013.00	SV-6917r1_rule	ECIC-1	High

Description
Because of the problems inherent in the spanning of networks of different classification levels, network attached KVM switches will not be attached to ISs of different classification levels. This can lead to the compromise of sensitive data. The IAO will ensure the network attached KVM switches are not attached to ISs of different classification levels.

STIG	Date
Keyboard Video and Mouse Switch STIG	2014-08-04

Details

Check Text ( C-2737r1_chk )
The reviewer will interview the IAO to verify that a network attached KVM switch is not attached to ISs of different classification levels.

Fix Text (F-6324r1_fix)
Remove all ISs from the network attached KVM switch that have a classification level that is different form the classificationl level of the network the KVM switch is attached to. Use a new network attached KVM switch for each classification level that you have ISs which where removed from the original KVM switch. Attach the KVM switch to a network that has the same classification level as the ISs that has been attach to the KVM switch.

Fix Text (F-6324r1_fix)

Remove all ISs from the network attached KVM switch that have a classification level that is different form the classificationl level of the network the KVM switch is attached to. Use a new network attached KVM switch for each classification level that you have ISs which where removed from the original KVM switch. Attach the KVM switch to a network that has the same classification level as the ISs that has been attach to the KVM switch.