Reaching equipment when the network fails.
WHAT IT IS
A separate network reaching management interfaces, independent of the production network.
WHAT IT REACHES
Server management controllers Switch consoles Power distribution units Environmental sensors
WHY IT MATTERS
When the production network fails, it is the only way in.
WHAT IT MUST NOT SHARE
The production network The same switches Ideally, the same power path
WHAT IT MUST HAVE
Its own connectivity, however modest.
WHAT TO CONSIDER
A separate connection, or a cellular backup.
WHAT ACCESS IT PROVIDES
Complete control: power cycling, console, firmware, boot configuration.
WHY THAT MAKES IT DANGEROUS
Anyone reaching it controls everything.
WHAT TO DO
Never expose it to the internet Restrict access to specific administrators Require strong authentication and a second factor Keep its firmware updated
WHY FIRMWARE SPECIFICALLY
Management controllers have had serious vulnerabilities, and they are rarely patched.
WHAT TO MONITOR
Access to it, and failed authentication attempts.
WHAT TO TEST
That it works, before you need it.
