UCF STIG Viewer Logo

The system must provide VPN connectivity for communications over untrusted networks.


Overview

Finding ID Version Rule ID IA Controls Severity
RHEL-06-000321 RHEL-06-000321 RHEL-06-000321_rule Low
Description
Providing the ability for remote users or systems to initiate a secure VPN connection protects information when it is transmitted over a wide area network.
STIG Date
Red Hat Enterprise Linux 6 Security Technical Implementation Guide 2013-02-05

Details

Check Text ( C-RHEL-06-000321_chk )
Run the following command to determine if the "openswan" package is installed:

# rpm -q openswan


If the package is not installed, this is a finding.
Fix Text (F-RHEL-06-000321_fix)
The Openswan package provides an implementation of IPsec and IKE, which permits the creation of secure tunnels over untrusted networks. The "openswan" package can be installed with the following command:

# yum install openswan