Title

A network attached KVM switch must not be attached to ISs of different classification levels. (Cat I impact)

Discussion

Because of the problems inherent in the spanning of networks of different classification levels, network attached KVM switches will not be attached to ISs of different classification levels. This can lead to the compromise of sensitive data. The ISSO will ensure the network attached KVM switches are not attached to ISs of different classification levels.

Check Content

The reviewer will interview the ISSO to verify that a network attached KVM switch is not attached to ISs of different classification levels. If a network attached KVM is attached to ISs of different classification levels, this is a finding.

Fix Text

Remove all ISs from the network attached KVM switch that have a classification level that is different from the classification level of the network the KVM switch is attached to. Use a new network attached KVM switch for each IS classification level that you removed from the original KVM switch. Attach the KVM switch to a network that has the same classification level as the ISs that have been attach to the KVM switch.

Additional Identifiers

Rule ID: SV-6917r2_rule

Vulnerability ID: V-6717

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.