Title

An OOB Management DOES NOT comply with the Enclave and/or Network Infrastructure STIGs. (Cat II impact)

Discussion

Requirement: The IAO will ensure that out-of-band management networks comply with the Enclave and Network Infrastructure STIGs. out-of-band management networks must comply with the requirements contained in the Enclave and Network Infrastructure STIGs so that the threats and/or vulnerabilities associated with all networks and enclaves are properly mitigated according to DoD policy.

Check Content

Interview the IAO and/or SA to confirm compliance through discussion, review of site policy and procedures, diagrams, documentation, configuration files, logs, records, DAA/other approvals, etc as applicable

Fix Text

Implement processes / procedures, generate documents, and/or adjust configuration(s) / architecture, as necessary to comply with policy.

Additional Identifiers

Rule ID: SV-9013r1_rule

Vulnerability ID: V-8518

Group Title: An OOB Management network NOT STIG compliant

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.