Ensure iptables is installed – zypper
Details /usr/sbin/iptables is required for firewall management and configuration. Solution Install iptables using the appropriate package manager or manual installation:...
- Home
- Security Hardening
- Tenable Cisco Firepower Management Center OS Best Practices
Tenable Cisco Firepower Management Center OS Best Practices
Ensure IPv6 redirects are not accepted – /etc/sysctl ipv6 all accept
Details This setting prevents the system from accepting ICMP redirects. ICMP redirects tell the system about alternate routes for sending...Ensure IPv6 redirects are not accepted – /etc/sysctl ipv6 default accept
Details This setting prevents the system from accepting ICMP redirects. ICMP redirects tell the system about alternate routes for sending...Ensure kernel module loading and unloading is collected – auditctl init_module
Details Monitor the loading and unloading of kernel modules. The programs insmod (install a kernel module), rmmod (remove a kernel...Ensure kernel module loading and unloading is collected – auditctl insmod
Details Monitor the loading and unloading of kernel modules. The programs insmod (install a kernel module), rmmod (remove a kernel...Ensure kernel module loading and unloading is collected – auditctl modprobe
Details Monitor the loading and unloading of kernel modules. The programs insmod (install a kernel module), rmmod (remove a kernel...Ensure kernel module loading and unloading is collected – auditctl rmmod
Details Monitor the loading and unloading of kernel modules. The programs insmod (install a kernel module), rmmod (remove a kernel...Ensure kernel module loading and unloading is collected – init_module
Details Monitor the loading and unloading of kernel modules. The programs insmod (install a kernel module), rmmod (remove a kernel...Ensure kernel module loading and unloading is collected – insmod
Details Monitor the loading and unloading of kernel modules. The programs insmod (install a kernel module), rmmod (remove a kernel...Ensure kernel module loading and unloading is collected – modprobe
Details Monitor the loading and unloading of kernel modules. The programs insmod (install a kernel module), rmmod (remove a kernel...