+OPS.1.1.7.A4 Protection of System Management Communication (B)

OPS.1.1.7.A4 Protection of System Management Communication (B)

As soon as a system management solution and the systems to be managed communicate via productive infrastructure, secure protocols MUST be used for this purpose. If this is not possible, a dedicated administration network (out-of-band management) MUST be used (see NET.1.1 Network Architecture and Design). If this is also not possible, complementary security mechanisms MUST be used at another level (e.g. tunnel mechanisms via encrypted VPN or comparable solutions).

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
blocks G 0.15 Eavesdropping
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.21 Manipulation with Hardware or Software
blocks G 0.22 Manipulation of Information
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.43 Attack with Specially Crafted Messages