+NET.3.2.A18 Administration Using a Separate Management Network (S)

NET.3.2.A18 Administration Using a Separate Management Network (S)

Firewalls SHOULD only be administered using a separate management network (out-of-band management). Any administration interface available via the actual data network at hand (in-band) SHOULD be disabled. Communication in a management network SHOULD be limited to a few management protocols with well-defined origins and destinations via management firewalls (see NET.1.1 Network Architecture and Design). The available security mechanisms of the management protocols used for authentication, integrity assurance, and encryption SHOULD be activated. All insecure management protocols SHOULD be disabled (see NET.1.2 Network Management).

1. Prehľad

1.1 Odkazy

1.2 Identifikované požiadavky

1.3 Súvisiace predpisy

2. Identifikované požiadavky

Požiadavky

3. Súvisiace predpisy

Predpisy

Prepojené úlohy

Prepojenia
blocks G 0.9 Failure or Disruption of Communication Networks
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems