CIS_Amazon_Linux_2_Benchmarks

Ensure Source Routed Packets Are Not Accepted
Profile Applicability:  • Level 1 Description:  Source routed packets allow the sender to specify the route a packet should take through the network. Accep...
Wed, 28 May, 2025 at 4:43 AM
Ensure Suspicious Packets Are Logged
Profile Applicability:  • Level 1 Description:  Logging suspicious network packets enables detection of potentially malicious activity such as spoofing, ma...
Wed, 28 May, 2025 at 4:48 AM
Ensure TCP SYN Cookies Are Enabled
Profile Applicability:  • Level 1 Description:  TCP SYN cookies are a mechanism to protect against SYN flood attacks by allowing the server to handle half-...
Wed, 28 May, 2025 at 5:59 AM
Ensure IPv6 Router Advertisements Are Not Accepted
Profile Applicability:  • Level 1 Description: IPv6 router advertisements are used for network configuration in IPv6 environments. Accepting unsolicited or...
Wed, 28 May, 2025 at 6:04 AM
Ensure iptables Is Installed
Profile Applicability:  • Level 1 Description:  iptables is a user-space utility program that allows a system administrator to configure the IP packet filt...
Wed, 28 May, 2025 at 6:10 AM
Ensure Only One Firewall Configuration Utility Is In Use
Profile Applicability:  • Level 1 Description:  Using multiple firewall configuration utilities simultaneously can cause conflicts, leading to inconsistent...
Wed, 28 May, 2025 at 6:15 AM
Ensure firewalld Is Installed
Profile Applicability:  • Level 1 Description:  firewalld is a dynamic firewall manager that provides a flexible way to manage firewall rules and zones. En...
Wed, 28 May, 2025 at 6:20 AM
Ensure firewalld Service Is Enabled and Running
Profile Applicability:  • Level 1 Description:  The firewalld service manages firewall rules dynamically to control network traffic on the system. Ensuring...
Wed, 28 May, 2025 at 6:25 AM
Ensure firewalld Drops Unnecessary Services and Ports
Profile Applicability:  • Level 1 Description:  firewalld provides dynamic firewall management, allowing administrators to control services and ports expos...
Wed, 28 May, 2025 at 6:30 AM
Ensure Network Interfaces Are Assigned to Appropriate Zones
Profile Applicability:  • Level 1 Description:  Firewalld uses zones to classify network interfaces based on trust levels, applying specific firewall rules...
Wed, 28 May, 2025 at 6:35 AM