← Back to Storage Area Network Security Technical Implementation Guide

V-6636

CAT II (Medium)

SAN management is not accomplished using the out-of-band or direct connection method.

Rule ID

SV-6773r1_rule

STIG

Storage Area Network Security Technical Implementation Guide

Version

V2R5

CCIs

None

Discussion

Removing the management traffic from the production network diminishes the security profile of the SAN servers by allowing all the management ports to be closed on the production network. The IAO/NSO will ensure that SAN management is accomplished using the out-of-band or direct connection method.

Check Content

The reviewer will interview the IAO and view the SAN network drawings provided.

Fix Text

Develop a plan to migrate the SAN management to an out-of-band network or a direct connect method.  Obtain CM approval for the plan and implement the plan.