Information Assurance - KVM Switch not Approved by the Defense Security Accreditation Working Group (DSAWG)

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-31115	IA-10.02.01	SV-41244r2_rule	DCSP-1	Medium

Description
Failure to use approved switch boxes can result in the loss or compromise of classified information.

STIG	Date
Traditional Security	2013-07-11

Details

Check Text ( C-39789r3_chk )
1. Check all KVM switches that switch from NIPR to SIPR - or other low side to high side systems being reviewed. 2. Ensure switches are on the most current approved DSAWG list or otherwise comply with DSAWG guidance for use for switching between high side and low side devices. 3. Check to ensure that any unapproved switch boxes in use have specific approval for use in the SIPRNet Approval to Connect (ATC) or (IATC) from the Classified Connection Approval Office (CCAO). TACTICAL ENVIRONMENT: The check is applicable where KVM devices are in use.

Check Text ( C-39789r3_chk )

1. Check all KVM switches that switch from NIPR to SIPR - or other low side to high side systems being reviewed.

2. Ensure switches are on the most current approved DSAWG list or otherwise comply with DSAWG guidance for use for switching between high side and low side devices.

3. Check to ensure that any unapproved switch boxes in use have specific approval for use in the SIPRNet Approval to Connect (ATC) or (IATC) from the Classified Connection Approval Office (CCAO).

TACTICAL ENVIRONMENT: The check is applicable where KVM devices are in use.

Fix Text (F-34994r2_fix)
1. All KVM switches that switch from NIPR to SIPR - or other low side to high side systems being reviewed must be on the most current approved DSAWG list or otherwise comply with DSAWG guidance. 2. Any unapproved switch boxes in use (switching from NIPR to SIPR) must have specific approval for use and be addressed in the SIPRNet Approval to Connect (ATC) or IATC from the Classified Connection Approval Office (CCAO).

Fix Text (F-34994r2_fix)

1. All KVM switches that switch from NIPR to SIPR - or other low side to high side systems being reviewed must be on the most current approved DSAWG list or otherwise comply with DSAWG guidance.

2. Any unapproved switch boxes in use (switching from NIPR to SIPR) must have specific approval for use and be addressed in the SIPRNet Approval to Connect (ATC) or IATC from the Classified Connection Approval Office (CCAO).