+NET.3.1.A4 Protection of Administration Interfaces (B)

NET.3.1.A4 Protection of Administration Interfaces (B)

All administration and management access to routers and switches MUST be restricted to individual source IP addresses or address ranges. It MUST be ensured that it is not possible to access the administration interfaces directly from untrusted networks.

Suitably encrypted protocols SHOULD be used to administer and monitor routers and switches. If unencrypted protocols are nevertheless used, a separate administration network (out-of-band management) MUST be used for administration. The management interfaces and administration connections MUST be protected by means of a separate firewall. Appropriate time limits MUST be specified for the interfaces (e.g. for timeouts).

All services not required for management interfaces MUST be disabled. If a network component has a dedicated hardware interface, any unauthorised access to this interface MUST be prevented appropriately.

1. Přehled

1.1 Odkazy

1.2 Identifikované požadavky

1.3 Související regulace

2. Identifikované požadavky

Požadavky

3. Související regulace

Regulace

Propojené úkoly

Vazby
blocks G 0.9 Failure or Disruption of Communication Networks
blocks G 0.11 Failure or Disruption of Service Providers
blocks G 0.14 Interception of Information / Espionage
blocks G 0.15 Eavesdropping
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.31 Incorrect Use or Administration of Devices and Systems
blocks G 0.32 Misuse of Authorisation
blocks G 0.36 Identity theft
blocks G 0.38 Misuse of Personal Information