Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-6633 | SAN04.010.00 | SV-6753r2_rule | Medium |
Description |
---|
Switch-to-switch management traffic does not have to be encrypted. Bidirectional authentication ensures that a rogue switch cannot be inserted and be auto configured to join the fabric. |
STIG | Date |
---|---|
Storage Area Network STIG | 2018-10-03 |
Check Text ( C-2487r2_chk ) |
---|
Verify that all fabric switches are configured to bidirectional authentication. |
Fix Text (F-6221r2_fix) |
---|
Configure the SAN fabric switches to use bidirectional authentication between switches. |