Detections
Analytics

1.147 ALMA-09-019270

Information

AlmaLinux OS 9 must not have unauthorized IP tunnels configured.

GROUP ID: V-269250
RULE ID: SV-269250r1050132

IP tunneling mechanisms can be used to bypass network filtering. If tunneling is required, it must be documented with the information system security officer (ISSO).

Solution

Remove all unapproved tunnels from the system, or document them with the ISSO.

See Also

https://workbench.cisecurity.org/benchmarks/27039

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CCI|CCI-000366, Rule-ID|SV-269250r1050132_rule, STIG-ID|ALMA-09-019270, Vuln-ID|V-269250

Plugin: Unix

Control ID: dce23814f1d960b527cf6b491555bf00dcfa1c35dd9ba6c7a8436e8b37ed94a7