STIGQter: STIG Summary: SDN Using NV Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 27 Feb 2017:

SDN controllers must be deployed as clusters and on separate physical hosts to eliminate single point of failure.

DISA Rule

SV-87749r1_rule

Vulnerability Number

V-73097

Group Title

NET-SDN-013

Rule Version

NET-SDN-013

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Deploy SDN controllers as clusters on separate physical hosts to eliminate single point of failure.

Check Contents

Review the network virtualization platform topology and the SDN configuration to verify that SDN controllers have been deployed as clusters on separate physical hosts.

If the SDN controllers have not been deployed as clusters on separate physical hosts, this is a finding.

Vulnerability Number

V-73097

Documentable

False

Rule Version

NET-SDN-013

Severity Override Guidance

Review the network virtualization platform topology and the SDN configuration to verify that SDN controllers have been deployed as clusters on separate physical hosts.

If the SDN controllers have not been deployed as clusters on separate physical hosts, this is a finding.

Check Content Reference

M

Target Key

3089

Comments