Detections
Analytics

GEN008520 - The system must employ a local firewall.

Information

A local firewall protects the system from exposing unnecessary or undocumented network services to the local enclave. If a system within the enclave is compromised, firewall protection on an individual system continues to protect it from attack.

Solution

Configure the system to use a local firewall.
Use SMIT to load the IPSEC filesets.
#smit install
Use SMIT to configure filters.
#smit ipsec4

See Also

http://iasecontent.disa.mil/stigs/zip/U_STIG_Library_2015_07.zip

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-7(12), CAT|II, CCI|CCI-001118, Rule-ID|SV-38961r1_rule, STIG-ID|GEN008520, Vuln-ID|V-22582

Plugin: Unix

Control ID: 741a7a3a9bb5fbd4d733de0802ef7188e3573c688ace542400354e3f5e58d407