CIS_Amazon_Linux_2_Benchmarks

Ensure nftables Is Installed
Profile Applicability:  • Level 1 Description:  nftables is a modern packet filtering framework that replaces the legacy iptables. Installing nftables enab...
Wed, 28 May, 2025 at 6:39 AM
Ensure iptables Rules Are Flushed When Using nftables
Profile Applicability:  • Level 1 Description:  When migrating from iptables to nftables, it is important to flush existing iptables rules to avoid conflic...
Wed, 28 May, 2025 at 7:11 AM
Ensure an nftables Table Exists
Profile Applicability:  • Level 1 Description:  An nftables table groups related firewall rules for efficient network traffic filtering. Ensuring that at l...
Thu, 29 May, 2025 at 12:18 AM
Ensure nftables Base Chains Exist
Profile Applicability:  • Level 1 Description:  Base chains in nftables are the fundamental chains (such as input, forward, and output) within a table that...
Thu, 29 May, 2025 at 12:22 AM
Ensure nftables Loopback Traffic Is Properly Configured
Profile Applicability:  • Level 1 Description:  Loopback traffic is network communication within the local host using the loopback interface (lo). Properly...
Thu, 29 May, 2025 at 12:27 AM
Ensure nftables Outbound and Established Connections Are Properly Configured
Profile Applicability:  • Level 1 Description:  Configuring nftables to allow outbound and established connections ensures that legitimate traffic initiate...
Thu, 29 May, 2025 at 12:32 AM
Ensure nftables Default Deny Firewall Policy Is Configured
Profile Applicability:  • Level 1 Description:  A default deny firewall policy blocks all incoming and forwarding traffic unless explicitly allowed by fire...
Thu, 29 May, 2025 at 12:36 AM
Ensure nftables Service Is Enabled and Active
Profile Applicability:  • Level 1 Description:  The nftables service manages firewall rules for packet filtering and network security. Ensuring that the nf...
Thu, 29 May, 2025 at 12:41 AM
Ensure nftables Rules Are Permanent
Profile Applicability:  • Level 1 Description:  By default, nftables rules exist only in memory and are lost after a system reboot. Ensuring nftables rules...
Thu, 29 May, 2025 at 12:46 AM
Ensure iptables Packages Are Installed
Profile Applicability:  • Level 1 Description:  The iptables package provides the necessary tools to configure and manage IPv4 packet filtering and firewal...
Thu, 29 May, 2025 at 12:51 AM