Ensure the default security group of every VPC restricts all traffic

보통레벨 1수동 검토ibmcloud

설명

VPC security groups provide stateful filtering of ingress/egress network traffic to Virtual Server. It is recommended that no security group allows unrestricted ingress access to a Virtual Server. Unless modified, the default security group allows inbound traffic from all members of the group that is, all other virtual servers that are attached to this security group. Removing uncontrolled connectivity to a Virtual Server, reduces a server's exposure to risk.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

Perform the following tasks to determine if the account is configured as prescribed: Using Console: 1. Login to the IBM Cloud Portal at https://cloud.ibm.com. 2. At the Menu icon, select VPC Infrastructure, VPC Layout, Security Groups`. 3. For the default security group, perform the following: a. Ensure no Inbound Rule exists that allows unrequited traffic to the Virtual Servers.

조치 방법

조치 방식: 가이드 또는 인프라 패치

Using Console: 1. Login to the IBM Cloud Portal at https://cloud.ibm.com. 2. At the Menu icon, select VPC Infrastructure, VPC Layout, Security Groups. 3. For the default security group, perform the following: a. Identify the Inbound rule. b. Update the rule to only allow the required traffic flow.

속성

운영 체제: 모두
태그: cloudibmcloudnetwork
참고 자료: CIS IBM Cloud Foundations Benchmark v2.0.0 - 6.2.2 Ensure the default security group of every VPC restricts all traffic