Detections
Analytics

GEN008520 - The system must employ a local firewall.

Information

A local firewall protects the system from exposing unnecessary or undocumented network services to the local enclave. If a system within the enclave is compromised, firewall protection on an individual system continues to protect it from attack.

Solution

Configure the system to use a local firewall.
Use SMIT to load the IPSEC filesets.
#smit install

Use SMIT to configure filters.
#smit ipsec4

See Also

https://iasecontent.disa.mil/stigs/zip/U_AIX_6-1_V1R14_STIG.zip

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-7(12), CAT|II, CCI|CCI-001118, Group-ID|V-22582, Rule-ID|SV-38961r1_rule, STIG-ID|GEN008520, Vuln-ID|V-22582

Plugin: Unix

Control ID: c09876ab547ecc9c129e3e172dc2db4d7a8f253fb7f7e851007c0f55d63ba320