Detections
Analytics

4.1.1 Ensure ufw is installed

Information

The Uncomplicated Firewall (ufw) is a frontend for iptables and is particularly well-suited for host-based firewalls. ufw provides a framework for managing netfilter, as well as a command-line interface for manipulating the firewall

UFW acts as a frontend for both iptables and nftables and can use either as its backend, though the specific backend depends on the Linux distribution and system configuration.

You can enable the firewall, view its status, and manage rules using simple command-line tools to secure your system.

Solution

Run the following command to install Uncomplicated Firewall (UFW):

# apt install ufw

Impact:

Changing firewall settings while connected over the network can result in being locked out of the system.

See Also

https://workbench.cisecurity.org/benchmarks/27797

Item Details

Category: ACCESS CONTROL, SECURITY ASSESSMENT AND AUTHORIZATION, SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|AC-17(1), 800-53|CA-9, 800-53|SC-7, 800-53|SC-7(5), CSCv7|9.4

Plugin: Unix

Control ID: cf58a47b861fa2ef360b45f95a3937b771ff1871d50b7da343d930c17460b803