STIGUI
V-251377CAT II — Medium severitySV-251377r808534_rule

An Out-of-Band (OOB) management network must be deployed or 24x7 personnel must have console access for device management.

Rule version NET1622 · STIG v10 · 2024-08-02

Discussion

From an architectural point of view, providing Out-Of-Band (OOB) management of network systems is the best first step in any management strategy. No production traffic resides on an out-of-band network. The biggest advantage to implementation of an OOB network is providing support and maintenance to the network that has become degraded or compromised. During an outage or degradation period the in band management link may not be available. The consequences of loss of availability is unacceptable and could include the immediate and sustained loss of mission effectiveness. Maintenance support for key IT assets must be available to respond 24x7 immediately upon failure.

Check

Review the network topology and verify that an OOB network provides connectivity from the management network to all of the managed network elements.

If an OOB network has not been deployed, verify that the network administrators have management access via the console to the managed network elements.

If there is no OOB network or if network administrators do not have management access via the console to the managed network elements, this is a finding.

Fix

The network administrator will manage devices via direct connection or access via OOB management network.

Identifiers

Group ID
V-251377
Group title
NET1622
Rule ID
SV-251377r808534_rule
Check ID
C-54812r806084_chk
Fix ID
F-54765r806085_fix