Storage Area Network Security Technical Implementation Guide

The Storage Area Network Security Technical Implementation Guide (V2 R5) has 28 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

28STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R5

CurrentPublished Thu Jan 30 2025

All security related patches are not installed.

Storage Area Network Security Technical Implementation Guide

Assessment Title

Rule Text

All security related patches are not installed.

Description

Discussion Text

Failure to install security related patches leaves the SAN open to attack by exploiting known vulnerabilities.
The IAO/NSO will ensure that all security-related patches are installed.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-6613

Rule

SV-6733r1_rule

Severity

medium

Rule Version

SAN04.003.00

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

The reviewer will, with the assistance of the IAO/NSO, verify that all security related patches are installed.

Implementation Procedure

Fix Text

After verifying that the patches do not adversely impact the production SAN, create a plan for installing the patches on the SAN, obtain CM approval of the plan, and implement the plan installing the patches.

STIG check 4 of 28 in the Storage Area Network STIG checklist

← Previous · V-6610The SANs are not compliant with overall network security architecture, appropriate enclave, and data center security requirements in the Network Infrastructure STIG and the Enclave STIG Next · V-6619 →Prior to installing SAN components (servers, switches, and management stations) onto the DOD network infrastructure, components are not configured to meet the applicable STIG requirements.