SAN management is not accomplished using the out-of-band or direct connection method.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-6636 | SAN04.013.00 | SV-6773r1_rule | Medium |
| Description |
|---|
| Removing the management traffic from the production network diminishes the security profile of the SAN servers by allowing all the management ports to be closed on the production network. The IAO/NSO will ensure that SAN management is accomplished using the out-of-band or direct connection method. |
| STIG | Date |
|---|---|
| Storage Area Network STIG | 2019-06-28 |
Details
| Check Text ( C-2537r1_chk ) |
|---|
| The reviewer will interview the IAO and view the SAN network drawings provided. |
| Fix Text (F-6233r1_fix) |
|---|
| Develop a plan to migrate the SAN management to an out-of-band network or a direct connect method. Obtain CM approval for the plan and implement the plan. |