Detections
Analytics

4.1.3 Ensure firewalld service is enabled and running

Information

Ensure that the firewalld service is enabled to protect your system

firewalld (Dynamic Firewall Manager) tool provides a dynamically managed firewall. The tool enables network/firewall zones to define the trust level of network connections and/or interfaces. It has support both for IPv4 and IPv6 firewall settings. Also, it supports Ethernet bridges and allow you to separate between runtime and permanent configuration options. Finally, it supports an interface for services or applications to add firewall rules directly

Solution

Run the following command to enable and start firewalld

# systemctl --now enable firewalld

Impact:

Changing firewall settings while connected over network can result in being locked out of the system.

See Also

https://workbench.cisecurity.org/benchmarks/19886

Item Details

Category: ACCESS CONTROL, SECURITY ASSESSMENT AND AUTHORIZATION, SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|AC-17(1), 800-53|CA-9, 800-53|SC-7, 800-53|SC-7(5), CAT|II, CSCv7|9.4, Rule-ID|SV-244544r854073_rule, STIG-ID|RHEL-08-040101, Vuln-ID|V-244544

Plugin: Unix

Control ID: 605e6e7d8fd2df181b4bdaf62ad2c535cbe37337cf59d6912b33d84447f62735