The system must provide VPN connectivity for communications over untrusted networks.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-51121 | OL6-00-000321 | SV-65331r3_rule | Low |
| Description |
|---|
| Providing the ability for remote users or systems to initiate a secure VPN connection protects information when it is transmitted over a wide area network. |
| STIG | Date |
|---|---|
| Oracle Linux 6 Security Technical Implementation Guide | 2020-05-15 |
Details
| Check Text ( C-53523r3_chk ) |
|---|
| If the system does not communicate over untrusted networks, this is not applicable. Run the following command to determine if the "libreswan" package is installed: # rpm -q libreswan If the package is not installed, this is a finding. |
| Fix Text (F-55929r2_fix) |
|---|
| The Libreswan package provides an implementation of IPsec and IKE, which permits the creation of secure tunnels over untrusted networks. The "libreswan" package can be installed with the following command: # yum install libreswan |