Check: HMC0225
IBM Hardware Management Console (HMC) STIG:
HMC0225
(in versions v2 r1 through v1 r5)
Title
Connection to the Internet for IBM remote support must be in compliance with mitigations specified in the Ports and Protocols and Services Management (PPSM) requirements. (Cat I impact)
Discussion
Failure to securely connect to remote sites can leave systems open to multiple attacks and security violations through the network. Failure to securely implement remote support connections can lead to unauthorized access or denial of service attacks on theHardware Management Console.
Check Content
Have the Network Security Engineer check, that the remote Internet connection for IBM RSF support has met the mitigations outlined in Vulnerability Analysis for port 443/SSL in the PPSM requirements.
Fix Text
Have the Network Security Officer validate that the Internet connection meets the specifications in the PPSM requirements.
Additional Identifiers
Rule ID: SV-256891r991589_rule
Vulnerability ID: V-256891
Group Title: SRG-OS-000480-GPOS-00227
Expert Comments
CCIs
| Number | Definition |
|---|---|
| CCI-000366 |
Implement the security configuration settings. |
| CCI-002310 |
Establish and document usage restrictions for each type of remote access allowed. |