The system must provide VPN connectivity for communications over untrusted networks.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-38687 | RHEL-06-000321 | SV-50488r2_rule | Low |
| Description |
|---|
| Providing the ability for remote users or systems to initiate a secure VPN connection protects information when it is transmitted over a wide area network. |
| STIG | Date |
|---|---|
| Red Hat Enterprise Linux 6 Security Technical Implementation Guide | 2015-05-26 |
Details
| Check Text ( C-46249r2_chk ) |
|---|
| If the system does not communicate over untrusted networks, this is not applicable. Run the following command to determine if the "openswan" package is installed: # rpm -q openswan If the package is not installed, this is a finding. |
| Fix Text (F-43636r1_fix) |
|---|
| The Openswan package provides an implementation of IPsec and IKE, which permits the creation of secure tunnels over untrusted networks. The "openswan" package can be installed with the following command: # yum install openswan |