Skip to content

II - Mission Support Public

Rules and Groups employed by this XCCDF Profile

  • All the network level devices interconnected to the SAN are not located in a secure room with limited access.

    <VulnDiscussion>If the network level devices are not located in a secure area they can be tampered with which could lead to a denial of servi...
    Rule Medium Severity
  • SAN Fabric Switch User Accounts with Passwords

    <GroupDescription></GroupDescription>
    Group
  • Individual user accounts with passwords are not set up and maintained for the SAN fabric switch.

    &lt;VulnDiscussion&gt;Without identification and authentication unauthorized users could reconfigure the SAN or disrupt its operation by logging in...
    Rule Medium Severity
  • Fabric Switches do not have bidirectional authentication

    <GroupDescription></GroupDescription>
    Group
  • The SAN must be configured to use bidirectional authentication.

    &lt;VulnDiscussion&gt;Switch-to-switch management traffic does not have to be encrypted. Bidirectional authentication ensures that a rogue switch c...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules