Ensure no VPC security groups allow ingress from 0.0.0.0/0 to port 22

СредњаНиво 1Ручни прегледibmcloud

Опис

VPC security groups provide stateful filtering of ingress/egress network traffic to Virtual Servers. It is recommended that no security group allows unrestricted ingress access to port 22. Removing uncontrolled connectivity to remote console services, such as SSH, reduces a server's exposure to risk.

Како се проверава

Метод провере: Ручни преглед

Ова препорука се не може проверити аутоматски. Скенирање је наводи са овим упутствима када проследите --include-manual.

Perform the following tasks to determine if the account is configured as prescribed: Using Console: 1. Login to the IBM Cloud Portal at https://cloud.ibm.com. 2. At the Menu icon, select Infrastructure, Network, Security Groups. 3. For each security group, perform the following: a. Select the security group name. b. Ensure no Inbound Rule exists that has a value that includes port 22 and has a Source of 0.0.0.0/0. Note that a port range value of ANY or a port range that includes port 22, e.g. 0-1024, are inclusive of port 22.

Како се исправља

Метод исправке: Смерница или закрпа инфраструктуре

Using Console: 1. Login to the IBM Cloud Portal at https://cloud.ibm.com. 2. At the Menu icon, select Infrastructure, Network, Security Groups. 3. For each security group, perform the following: a. Select the security group name. b. Identify the Inbound rule to be removed. c. Using the Options icon, select Delete.

Својства

Оперативни системи: Било који
Ознаке: cloudibmcloudnetwork
Референца: CIS IBM Cloud Foundations Benchmark v2.0.0 - 6.2.4 Ensure no VPC security groups allow ingress from 0.0.0.0/0 to port 22