Check: GEN007780
VMware ESX 3 Server:
GEN007780
(in version v1 r2)
Title
The system must not have 6to4 enabled. (Cat II impact)
Discussion
6to4 is an IPv6 transition mechanism that involves tunneling IPv6 packets encapsulated in IPv4 packets on an ad-hoc basis. This is not a preferred transition strategy and increases the attack surface of the system.
Check Content
Determine if there are any 6to4 tunnels configured on the system. If any exist, this is a finding.
Fix Text
Remove the configuration for any 6to4 tunnels on the system.
Additional Identifiers
Rule ID: SV-26220r1_rule
Vulnerability ID: V-22545
Group Title: GEN007780
Expert Comments
Expert comments are only available to logged-in users.
CCIs
CCIs tied to check.
| Number | Definition |
|---|---|
| CCI-001551 |
The organization defines approved authorizations for controlling the flow of information between interconnected systems. |
Controls
Controls tied to check. These are derived from the CCIs shown above.
| Number | Title |
|---|---|
| No controls are assigned to this check |