UCF STIG Viewer Logo

An Out-of-Band (OOB) management network must be deployed or 24x7 personnel must have console access for device management.


Finding ID Version Rule ID IA Controls Severity
V-251377 NET1622 SV-251377r808534_rule Medium
From an architectural point of view, providing Out-Of-Band (OOB) management of network systems is the best first step in any management strategy. No production traffic resides on an out-of-band network. The biggest advantage to implementation of an OOB network is providing support and maintenance to the network that has become degraded or compromised. During an outage or degradation period the in band management link may not be available. The consequences of loss of availability is unacceptable and could include the immediate and sustained loss of mission effectiveness. Maintenance support for key IT assets must be available to respond 24x7 immediately upon failure.
Network Infrastructure Policy Security Technical Implementation Guide 2023-05-04


Check Text ( C-54812r806084_chk )
Review the network topology and verify that an OOB network provides connectivity from the management network to all of the managed network elements.

If an OOB network has not been deployed, verify that the network administrators have management access via the console to the managed network elements.

If there is no OOB network or if network administrators do not have management access via the console to the managed network elements, this is a finding.
Fix Text (F-54765r806085_fix)
The network administrator will manage devices via direct connection or access via OOB management network.