Title

The system must employ a local firewall. (Cat II impact)

Discussion

A local firewall protects the system from exposing unnecessary or undocumented network services to the local enclave. If a system within the enclave is compromised, firewall protection on an individual system continues to protect it from attack.

Check Content

Determine if the system is using a local firewall. # cat /etc/rc.config.d/ipfconf | tr '\011' ' ' | tr -s ' ' | sed -e 's/^[ \t]*//' | cut -f 3,3 -d " " | grep "IPF_START" If IPF_START is not set to 1, this is a finding.

Fix Text

Set IPF_START=1 in /etc/rc.config.d/ipfconf. Refresh/restart. # /sbin/init.d/ipfboot start

Additional Identifiers

Rule ID: SV-38403r1_rule

Vulnerability ID: V-22582

Group Title: GEN008520

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.