UCF STIG Viewer Logo

The KVM switch must be configured to encapsulate and send USB connections other than KVM connections.


Overview

Finding ID Version Rule ID IA Controls Severity
V-6714 KVM03.010.00 SV-6911r2_rule DCBP-1 High
Description
Some network attached KVM switched can encapsulate USB connections other than the keyboard, video monitor, and mouse connections. This connection could be a disk drive connection and could allow the transfer of data between the ISs attached to the KVM switch and the client system attached via IP to the KVM switch leading to a compromise of sensitive data. The ISSO or SA will ensure the KVM switch is not configured to encapsulate and send USB connections other than KVM connections.
STIG Date
Keyboard Video and Mouse Switch STIG 2015-12-09

Details

Check Text ( C-2727r2_chk )
The reviewer will, with the assistance of the ISSO or SA, verify the KVM switch is not configured to encapsulate and send USB connections other than KVM connections. If the KVM switch is configured to encapsulate and send USB connections other than Keyboard, Video, and Mouse connections, this is a finding.
Fix Text (F-6321r1_fix)
Reconfigure the network KVM switch so that it will not encapsulate USB connections other than the keyboard, video monitor, or mouse, over IP.