The SAN is not configured to use FIPS 140-1/2 validated encryption algorithm to protect management-to-fabric communications.
An XCCDF Rule
Description
The communication between the SAN management consol and the SAN fabric carries sensitive privileged configuration data. This data's confidentiality will be protected with FIPS 140-1/2 validate algorithm for encryption. Configuration data could be used to create a denial of service by disrupting the SAN fabric. The storage administrator will configure the SAN to use FIPS 140-1/2 validated encryption algorithm to protect management-to-fabric communications.
| Property | Value |
|---|---|
| Responsibility | Other |
- ID
- SV-6783r1_rule
- Severity
- Low
- Updated
Remediation Templates
A Manual Procedure
Develop a plan to implement FIPS-140-1/2 validated encryption to protect management-to-fabric communications. Obtain CM approval of the plan and execute the plan.