UCF STIG Viewer Logo

KVMs and A/B switches connecting information systems of differing classification levels must be on the NIAP Products Compliance List.


Overview

Finding ID Version Rule ID IA Controls Severity
V-6759 KVM04.006.00 SV-6981r2_rule DCBP-1 Medium
Description
An A/B switch not found on the Approved KVM and A/B Switch lists has not been tested to verify that it does not leak data between systems. This can lead to the compromise of sensitive data or the compromise of the ISs attached to the A/B switch. The organization will ensure that only approved KVM or A/B switches are used with ISs of differing classification levels.
STIG Date
Keyboard Video and Mouse Switch STIG 2014-08-04

Details

Check Text ( C-2906r3_chk )
The reviewer will verify that the KVM or A/B switch attached to ISs of different classification levels exist on the NIAP Products Compliance List.

https://www.niap-ccevs.org/CCEVS_Products/pcl.cfm?tech_name=Peripheral+Switch

If the KVM or A/B switch is not on the NIAP Product Compliance List, this is a finding.
Fix Text (F-6412r2_fix)
Replace the A/B switch with one from the Product Compliance List provided by NIAP.

https://www.niap-ccevs.org/CCEVS_Products/pcl.cfm?tech_name=Peripheral+Switch