Storage Area Network Security Technical Implementation Guide

The Storage Area Network Security Technical Implementation Guide (V2 R5) has 28 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

28STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R5

CurrentPublished Thu Jan 30 2025

The device must be supported by the vendor.

Storage Area Network Security Technical Implementation Guide

Assessment Title

Rule Text

The device must be supported by the vendor.

Description

Discussion Text

The use of unsupported devices can lead to the compromise of sensitive data or the compromise of the network the SAN is attached to.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-6662

Rule

SV-6802r1_rule

Severity

high

Rule Version

SAN06.001.00

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

This STIG is sunset and will no longer be maintained. If the site is using a device not supported by the vendor, this is a finding.

Implementation Procedure

Fix Text

Replace the device with one that is supported by the vendor and follow vendor best security practices.

STIG check 27 of 28 in the Storage Area Network STIG checklist

← Previous · V-6661Fabric switch configurations and management station configuration are not archived and/or copies of the operating system and other critical software for all SAN components are not stored in a fire rated container or are not collocated with the operational software.Next · V-7081 →SAN components are not configured with fixed IP addresses.