Ensure no VPC security groups allow ingress from 0.0.0.0/0 to port 3389

中级别 1人工审核ibmcloud

说明

VPC security groups provide stateful filtering of ingress/egress network traffic to Virtual Server Instances. It is recommended that no security group allows unrestricted ingress access to port 3389. Removing uncontrolled connectivity to remote console services, such as RDP, reduces a server's exposure to risk.

检查方式

审计方法: 人工审核

此项建议无法自动检查。当您传入 --include-manual 时，扫描结果会列出该项并附带这些说明。

Perform the following tasks to determine if the account is configured as prescribed: Using Console: 1. Login to the IBM Cloud Portal at https://cloud.ibm.com. 2. At the Menu icon, select Infrastructure, Network, Security Groups. 3. For each security group, perform the following: a. Select the security group name. b. Ensure no Inbound Rule exists that has a port range that includes port 3389 and has a Source of 0.0.0.0/0. Note that a port range value of ANY or a port range that includes port 3389, e.g. 3300-3400, are inclusive of port 3389.

修复方式

修复方法: 操作指南或基础设施补丁

Using Console: 1. Login to the IBM Cloud Portal at https://cloud.ibm.com. 2. At the Menu icon, select Infrastructure, Network, Security Groups. 3. For each security group, perform the following: a. Select the access control list name. b. Identify the Inbound rule to be removed. c. Using the Options icon, select Delete.

属性

操作系统: 任意
标签: cloudibmcloudnetwork
参考: CIS IBM Cloud Foundations Benchmark v2.0.0 - 6.2.3 Ensure no VPC security groups allow ingress from 0.0.0.0/0 to port 3389