Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
Network management ports on the SAN fabric switches except those needed to support the operational commitments of the sites are not disabled.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-6635 | SAN04.012.00 | SV-6769r1_rule | DCBP-1 | Medium |
| Description |
|---|
| Enabled network management ports that are not required expose the SAN fabric switch and the entire network to unnecessary vulnerabilities. By disabling these unneeded ports the exposure profile of the device and network is diminished. The IAO/NSO will disable all network management ports on the SAN fabric switches except those needed to support the operational commitments of the sites. |
| STIG | Date |
|---|---|
| Storage Area Network STIG | 2018-10-03 |
Details
| Check Text ( C-2529r1_chk ) |
|---|
| The reviewer will, with the assistance of the IAO/NSO, verify that all network management ports on the SAN fabric switches are disabled except those needed to support the operational commitments of the sites. |
| Fix Text (F-6230r1_fix) |
|---|
| Develop a plan to locate and disable all network management ports that are not required to support the operational commitments of the sites. Obtain CM approval of the plan and then execute the plan. |