1.176 RHEL-09-252045

Information

RHEL 9 must not have unauthorized IP tunnels configured.

GROUP ID: V-257950
RULE ID: SV-257950r1045006

IP tunneling mechanisms can be used to bypass network filtering. If tunneling is required, it must be documented with the information system security officer (ISSO).

Solution

Remove all unapproved tunnels from the system, or document them with the ISSO.

See Also

https://workbench.cisecurity.org/benchmarks/22008