Skip to content
ATO Pathways
Log In
Overview
Search
Catalogs
SCAP
OSCAL
Catalogs
Profiles
Documents
References
Knowledge Base
Platform Documentation
Compliance Dictionary
Platform Changelog
About
Catalogs
XCCDF
Storage Area Network STIG
SAN Fabric Switch User Accounts with Passwords
SAN Fabric Switch User Accounts with Passwords
An XCCDF Group - A logical subset of the XCCDF Benchmark
Details
Profiles
Prose
SAN Fabric Switch User Accounts with Passwords
1 Rule
<GroupDescription></GroupDescription>
Individual user accounts with passwords are not set up and maintained for the SAN fabric switch.
Medium Severity
<VulnDiscussion>Without identification and authentication unauthorized users could reconfigure the SAN or disrupt its operation by logging in to the fabric switch and executing unauthorized commands. The IAO/NSO will ensure individual user accounts with passwords are set up and maintained for the SAN fabric switch in accordance with the guidance contained in Appendix B, CJCSM and the Network Infrastructure STIG.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts>The IAO/NSO will ensure that individual user accounts with passwords are set up and maintained in accordance with the guidance contained in Appendix B, Chairman Of The Joint Chiefs of Staff Manual CJCSM 6510.1 and the DODI 8500.2.</PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility>Information Assurance Officer</Responsibility><Responsibility>Network Security Officer</Responsibility><IAControls>IAIA-1, IAIA-2</IAControls>