Ensure no workspace network security groups allow inbound traffic from the Internet from 0.0.0.0/0 to any administrative ports

SedangLevel 1Tinjauan manualibmcloud

Deskripsi

It is recommended that inbound traffic from the Internet to administrative ports is restricted, following the principle of least privilege access. These ports are RDP (3389), SSH (22), VNC (Listener: 5500, Server: 5900) and RPC (135, 111). Removing unrestricted connectivity from the Internet to administrative services, such as SSH, reduces a PowerVS resources risk exposure.

Cara pemeriksaan

Metode audit: Tinjauan manual

Rekomendasi ini tidak dapat diperiksa secara otomatis. Pemindaian akan menampilkannya beserta petunjuk ini saat Anda memberikan opsi --include-manual.

Perform the following tasks to determine if the account is configured as prescribed: 1. Login to the IBM Cloud Portal at https://cloud.ibm.com and select Power Virtual Server user interface. 2. In the navigation panel, click Workspaces, then select the workspace that contains the Network Security Groups to review and open the Workspace details page. 3. From the workspace details page, click view virtual servers. 4. In the left navigation panel, expand Networking and then select Network security groups. For each NSG perform the following: a. Select the access control list name b. Ensure no Inbound Rule exists that has a port range that includes ports 3389, 22, 5500, 5900, 135 or 111 and has a Source of 0.0.0.0/0.

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

1. Login to the IBM Cloud Portal at https://cloud.ibm.com and select Power Virtual Server user interface. 2. In the navigation panel, click Workspaces, then select the workspace that contains the Network Security Groups to review and open the Workspace details page. 3. From the workspace details page, click view virtual servers. 4. For each network security group, perform the following: a. Select the network security group name. b. Identify the Inbound rule to be removed, then select Delete.

Properti

Sistem operasi: Apa saja
Tag: cloudibmcloudnetwork
Referensi: CIS IBM Cloud Foundations Benchmark v2.0.0 - 9.5 Ensure no workspace network security groups allow inbound traffic from the Internet from 0.0.0.0/0 to any administrative ports