UCF STIG Viewer Logo

The system must provide VPN connectivity for communications over untrusted networks.


Finding ID Version Rule ID IA Controls Severity
V-38687 RHEL-06-000321 SV-50488r2_rule Low
Providing the ability for remote users or systems to initiate a secure VPN connection protects information when it is transmitted over a wide area network.
Red Hat Enterprise Linux 6 Security Technical Implementation Guide 2015-05-26


Check Text ( C-46249r2_chk )
If the system does not communicate over untrusted networks, this is not applicable.

Run the following command to determine if the "openswan" package is installed:

# rpm -q openswan

If the package is not installed, this is a finding.
Fix Text (F-43636r1_fix)
The Openswan package provides an implementation of IPsec and IKE, which permits the creation of secure tunnels over untrusted networks. The "openswan" package can be installed with the following command:

# yum install openswan