+NET.3.1.A13 Administration Using a Separate Management Network (S)

NET.3.1.A13 Administration Using a Separate Management Network (S)

Routers and switches SHOULD only be administered via a separate management network (out-of-band management). Any administration interface available via the actual data network at hand (in-band) SHOULD be disabled. The available security mechanisms of the management protocols used for authentication, integrity assurance, and encryption SHOULD be activated. All insecure management protocols SHOULD be disabled.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
blocks G 0.9 Failure or Disruption of Communication Networks
blocks G 0.14 Interception of Information / Espionage
blocks G 0.15 Eavesdropping
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.20 Information or Products from an Unreliable Source
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.25 Failure of Devices or Systems
blocks G 0.26 Malfunction of Devices or Systems
blocks G 0.27 Lack of Resources
blocks G 0.29 Violations of Laws or Regulations
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.31 Incorrect Use or Administration of Devices and Systems
blocks G 0.32 Misuse of Authorisation
blocks G 0.36 Identity theft
blocks G 0.38 Misuse of Personal Information