cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Ask the Expert- SD-WAN

501
Views
0
Helpful
5
Replies
Beginner

Declassify / Zeroize / Sanitize a 2960-L Switch

I am finding conflicting, perhaps outdated information on the sanitization (or zeroize or declassify) of cisco switches. Is it true that the 5900 series routers are the only model that support the "service declassify" command? Or do any other products support this? More specifically the 2960-L switch?

 

If not, is there a comparable procedure to zeroize this switch to meet government sanitization standards?

 

Everyone's tags (2)
1 ACCEPTED SOLUTION

Accepted Solutions
VIP Advisor

Re: Declassify / Zeroize / Sanitize a 2960-L Switch

Hi there,

I have only ever come across the zeroize command on some older routers, certainly not on a 2960. Arguably just formatting the flash on the 2960 should be sufficient as it is not removable.

 

Regarding moving your switches, provide the destination room has the same security classification or above you should be fine. It is moving items to lower classifications that you cannot do.

 

cheers,

Seb.

5 REPLIES 5
VIP Advisor

Re: Declassify / Zeroize / Sanitize a 2960-L Switch

Hi there,

What classification has the device been used at?

Using UK HMG classifications at Official all non-volatile memory must be formatted and removed. The switch can then be sent for recycling.

At Secret, all non-volatile memory must be formatted and removed and sent for destruction via approved suppliers on site. Likewise the switch must be sent to approved suppliers for shredding.

At TS and above nothing can leave the site. The entire unit must be shredded on site. This involves removing the PCB for shredding, the metal chassis can be sent for scrap.

 

cheers,

Seb.

Beginner

Re: Declassify / Zeroize / Sanitize a 2960-L Switch

Several units will be at varying levels of security. We were hoping/needing to just move units from one room to another and would need to sanitize in order to do that. So you're saying for sure there is no zeroize feature similar to what's on the 5900 series router?

VIP Advisor

Re: Declassify / Zeroize / Sanitize a 2960-L Switch

Hi there,

I have only ever come across the zeroize command on some older routers, certainly not on a 2960. Arguably just formatting the flash on the 2960 should be sufficient as it is not removable.

 

Regarding moving your switches, provide the destination room has the same security classification or above you should be fine. It is moving items to lower classifications that you cannot do.

 

cheers,

Seb.

Beginner

Re: Declassify / Zeroize / Sanitize a 2960-L Switch

Right, but the hallways are the problem between the rooms.
Highlighted
VIP Advisor

Re: Declassify / Zeroize / Sanitize a 2960-L Switch

Without knowing much about your site, you should be safe enough moving items around a building within a site, so long as you apply the two-man rule and don't leave the devices unattended during transit between the secured rooms.

 

cheers,

Seb.