Ensure no VPC access control lists allow ingress from 0.0.0.0/0 to port 3389

SedangLevel 1Tinjauan manualibmcloud

Deskripsi

VPC access control lists filter all incoming and outgoing traffic in IBM Cloud VPC. An ACL is a built-in, virtual firewall where ACL rules control traffic to and from the subnets, rather than to and from the virtual servers. It is recommended that no ACL allows unrestricted ingress access to port 3389. Removing uncontrolled connectivity to remote console services, such as RDP, reduces a server's exposure to risk.

Cara pemeriksaan

Metode audit: Tinjauan manual

Rekomendasi ini tidak dapat diperiksa secara otomatis. Pemindaian akan menampilkannya beserta petunjuk ini saat Anda memberikan opsi --include-manual.

Perform the following tasks to determine if the account is configured as prescribed: Using Console: 1. Login to the IBM Cloud Portal at https://cloud.ibm.com. 2. At the Menu icon, select Infrastructure, Network, Access Control Lists. 3. For each access control list, perform the following: a. Select the access control list name. b. Ensure no Inbound Rule exists that has a port range that includes port 3389 and has a Source of 0.0.0.0/0. Note that a port range value of ANY or a port range that includes port 3389, e.g. 3300-3400, are inclusive of port 3389.

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

1. Login to the IBM Cloud Portal at https://cloud.ibm.com. 2. At the Menu icon, select Infrastructure, Network, Access Control Lists. 3. For the ACL that need to be remediated, perform the following: a. Select the access control list name. b. Identify the Inbound rule to be removed. c. Using the Options icon, select Delete.

Properti

Sistem operasi: Apa saja
Tag: access-controlcloudibmcloudnetwork
Referensi: CIS IBM Cloud Foundations Benchmark v2.0.0 - 6.2.5 Ensure no VPC access control lists allow ingress from 0.0.0.0/0 to port 3389