Revision 1.15

Functional Update

• 3.5.1.1 Ensure default deny firewall policy - Chain FORWARD
• 3.5.1.1 Ensure default deny firewall policy - Chain INPUT
• 3.5.1.1 Ensure default deny firewall policy - Chain OUTPUT
• 3.5.2.1 Ensure IPv6 default deny firewall policy - Chain FORWARD
• 3.5.2.1 Ensure IPv6 default deny firewall policy - Chain INPUT
• 3.5.2.1 Ensure IPv6 default deny firewall policy - Chain OUTPUT
• 5.2.13 Ensure only strong ciphers are used
• 5.2.14 Ensure only strong MAC algorithms are used
• 5.2.15 Ensure only strong Key Exchange algorithms are used
• 5.4.1.2 Ensure minimum days between password changes is 7 or more - login.defs