Details

https://docs.docker.com/v1.8/articles/networking/

Solution

Do not run the Docker daemon with ‘–iptables=false’ parameter.
For example, do not start the Docker daemon as below-dockerd –iptables=falseImpact-None.Default Value-By default, ‘iptables’ is set to ‘true’.

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/517

This security hardening control applies to the following category of controls within NIST 800-53: System and Communications Protection.This control applies to the following type of system Unix.

References

• 800-53|SC-7(12)

Source

• Tenable.com/audits