Communications from the management console to the SAN fabric are not protected strong two-factor authentication.
An XCCDF Rule
Description
Using two-factor authentication between the SAN management console and the fabric enhances the security of the communications carrying privileged functions. It is harder for an unauthorized management console to take control of the SAN. The preferred solution for two-factor authentication is DoD PKI implemented on the CAC or Alternative (Alt) token.
| Property | Value |
|---|---|
| Responsibility | Information Assurance Officer |
- ID
- SV-6778r1_rule
- Version
- SAN04.014.00
- Severity
- Low
- Updated
Remediation Templates
A Manual Procedure
Develop a plan to migrate to the use of DoD PKI authentication between the SAN management console and the SAN fabric. Obtain CM approval of the plan and implement the plan.