Check: NET1622
Network Infrastructure Policy STIG:
NET1622
(in versions v10 r6 through v9 r2)
Title
An Out-of-Band (OOB) management network must be deployed or 24x7 personnel must have console access for device management. (Cat II impact)
Discussion
From an architectural point of view, providing Out-Of-Band (OOB) management of network systems is the best first step in any management strategy. No production traffic resides on an out-of-band network. The biggest advantage to implementation of an OOB network is providing support and maintenance to the network that has become degraded or compromised. During an outage or degradation period the in band management link may not be available. The consequences of loss of availability is unacceptable and could include the immediate and sustained loss of mission effectiveness. Maintenance support for key IT assets must be available to respond 24x7 immediately upon failure.
Check Content
Review the network topology and verify that an OOB network provides connectivity from the management network to all of the managed network elements. If an OOB network has not been deployed, verify that the network administrators have management access via the console to the managed network elements. If there is no OOB network or if network administrators do not have management access via the console to the managed network elements, this is a finding.
Fix Text
The network administrator will manage devices via direct connection or access via OOB management network.
Additional Identifiers
Rule ID: SV-251377r808534_rule
Vulnerability ID: V-251377
Group Title: NET1622
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-000366 |
The organization implements the security configuration settings. |
Controls
Number | Title |
---|---|
CM-6 |
Configuration Settings |