The SLES for vRealize must employ a deny-all, allow-by-exception firewall policy for allowing connections to other systems.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-89881	VRAU-SL-001550	SV-100531r1_rule		Medium

Description
Failure to restrict network connectivity only to authorized systems permits inbound connections from malicious systems. It also permits outbound connections that may facilitate exfiltration of DoD data.

STIG	Date
VMware vRealize Automation 7.x SLES Security Technical Implementation Guide	2018-10-12

Details

Check Text ( C-89573r1_chk )
Check firewall configuration with the following command: iptables --list|grep -e OUTPUT -e INPUT -e FORWARD If employ a deny-all, allow-by-exception firewall policy for allowing connections to other systems, this is a finding.

Fix Text (F-96623r1_fix)
Configure the SLES for vRealize to employ a deny-all, allow-by-exception firewall policy for allowing connections to other systems.