Question

A security team audits a Cisco Intersight Managed Mode (IMM) UCS domain and finds that a third-party monitoring tool requires out-of-band access to the server's baseboard management controller to read sensors and power state, but the team wants to prohibit any interactive KVM redirection and virtual media mounting on those servers. Which server profile policy change best satisfies both requirements?

Accepted Answer

Configure an IPMI over LAN policy that enables IPMI access with an appropriate privilege level, and remove or disable the Virtual KVM policy on the server profile

Answer

Disable the IPMI over LAN policy entirely and rely on the Virtual KVM policy for all out-of-band access

Answer

Enable Serial over LAN (SoL) policy and set the KVM policy to read-only mode

Answer

Configure a Local User policy with admin rights so the monitoring tool authenticates through the CIMC web GUI instead of IPMI