SAN management is not accomplished using the out-of-band or direct connection method.
An XCCDF Rule
Description
Removing the management traffic from the production network diminishes the security profile of the SAN servers by allowing all the management ports to be closed on the production network. The IAO/NSO will ensure that SAN management is accomplished using the out-of-band or direct connection method.
| Property | Value |
|---|---|
| Responsibility | Information Assurance Officer |
- ID
- SV-6773r1_rule
- Version
- SAN04.013.00
- Severity
- Medium
- Updated
Remediation Templates
A Manual Procedure
Develop a plan to migrate the SAN management to an out-of-band network or a direct connect method. Obtain CM approval for the plan and implement the plan.