Detections
Analytics

4.1.1 Ensure firewalld is installed

Information

firewalld is a high-level firewall rules management frontend utility. It does not directly handle packet filtering itself but relies on the nftables subsystem within the Linux kernel.

firewalld is a dynamic, user friendly, firewall manager that can protect against threats originating from within a corporate network including malicious mobile code and poorly configured software on a host.

Solution

Run the following command to install firewalld

# dnf install firewalld

Impact:

Installing the firewalld package alone does not change firewall behavior; rules take effect only after the service is enabled and a zone/policy is configured.

See Also

https://workbench.cisecurity.org/benchmarks/27890

Item Details

Category: SECURITY ASSESSMENT AND AUTHORIZATION, SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|CA-9, 800-53|SC-7, 800-53|SC-7(5), CSCv7|9.4

Plugin: Unix

Control ID: bb6cbeebe435b69ec6bfb08f80e1c7ea4cbb6ed850ef3f77c1e425e19098f1d7