Detections
Analytics

1.424 OL09-00-006010

Information

OL 9 must not have unauthorized IP tunnels configured.

GROUP ID: V-271863
RULE ID: SV-271863r1092639

IP tunneling mechanisms can be used to bypass network filtering. If tunneling is required, it must be documented with the information system security officer (ISSO).

Solution

Remove all unapproved tunnels from the system, or document them with the ISSO.

See Also

https://workbench.cisecurity.org/benchmarks/27024

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CCI|CCI-000366, Rule-ID|SV-271863r1092639_rule, STIG-ID|OL09-00-006010, Vuln-ID|V-271863

Plugin: Unix

Control ID: 870b3e0ca666bc193de325df442ac9f7ed9b2265a83cedabb01fdff8a119a642