STIGQter: STIG Summary: IBM Hardware Management Console (HMC) Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 24 Jul 2024:

Connection to the Internet for IBM remote support must be in compliance with mitigations specified in the Ports and Protocols and Services Management (PPSM) requirements.

DISA Rule

SV-256891r991589_rule

Vulnerability Number

V-256891

Group Title

SRG-OS-000480-GPOS-00227

Rule Version

HMC0225

Severity

CAT I

CCI(s)

• CCI-000366 - Implement the security configuration settings.

Weight

10

Fix Recommendation

Have the Network Security Officer validate that the Internet connection meets the specifications in the PPSM requirements.

Check Contents

Have the Network Security Engineer check, that the remote Internet connection for IBM RSF support has met the mitigations outlined in Vulnerability Analysis for port 443/SSL in the PPSM requirements.

Vulnerability Number

V-256891

Documentable

False

Rule Version

HMC0225

Severity Override Guidance

Have the Network Security Engineer check, that the remote Internet connection for IBM RSF support has met the mitigations outlined in Vulnerability Analysis for port 443/SSL in the PPSM requirements.

Check Content Reference

M

Target Key

5533