Ensure no VPC access control lists allow ingress from 0.0.0.0/0 to port 22

СреднийУровень 1Ручная проверкаibmcloud

Описание

VPC access control lists filter all incoming and outgoing traffic in IBM Cloud VPC. An ACL is a built-in, virtual firewall where ACL rules control traffic to and from the subnets, rather than to and from the virtual servers. It is recommended that no ACL allows unrestricted ingress access to port 22. Removing uncontrolled connectivity to remote console services, such as SSH, reduces a server's exposure to risk.

Как проверяется

Метод проверки: Ручная проверка

Эту рекомендацию нельзя проверить автоматически. Сканирование выводит её вместе с этими инструкциями при указании флага --include-manual.

Using Console: 1. Log in to the IBM Cloud Portal at https://cloud.ibm.com 2. Navigate to the Infrastructure section by clicking on the Menu icon and selecting Infrastructure, Network, Access Control Lists 3. For each access control list, follow these steps: a. Click on the access control list name to view its details. b. In the Inbound Rules tab, examine each rule to ensure it does not contain a port range that includes port 22 and has a Source of ANY IP OR 0.0.0.0/0. A port range value of ALL or a range that includes port 22, such as 0-1024 are inclusive of port 22.

Как исправляется

Метод исправления: Рекомендация или патч инфраструктуры

Using Console: 1. Login to the IBM Cloud Portal at https://cloud.ibm.com. 2. Select the Navigation Menu, then click Infrastructure, Network, Access control lists. 3. For the ACL that need to be remediated, perform the following: a. Select the access control list name. b. Identify the Inbound rule to be removed. c. Using the Options icon, select Delete.

Свойства

Операционные системы: Любая
Теги: access-controlcloudibmcloudnetwork
Источник: CIS IBM Cloud Foundations Benchmark v2.0.0 - 6.2.1 Ensure no VPC access control lists allow ingress from 0.0.0.0/0 to port 22