The system must provide VPN connectivity for communications over untrusted networks.

From Oracle Linux 6 Security Technical Implementation Guide

Associated with: CCI-001130

SV-65331r2_rule The system must provide VPN connectivity for communications over untrusted networks.

Vulnerability discussion

Providing the ability for remote users or systems to initiate a secure VPN connection protects information when it is transmitted over a wide area network.

Check content

If the system does not communicate over untrusted networks, this is not applicable. Run the following command to determine if the "openswan" package is installed: # rpm -q openswan If the package is not installed, this is a finding.

Fix text

The Openswan package provides an implementation of IPsec and IKE, which permits the creation of secure tunnels over untrusted networks. The "openswan" package can be installed with the following command: # yum install openswan

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.