IBM z/OS Policy Agent must employ a deny-all, allow-by-exception firewall policy for allowing connections to other systems.
An XCCDF Rule
Description
Failure to restrict network connectivity only to authorized systems permits inbound connections from malicious systems. It also permits outbound connections that may facilitate exfiltration of DoD data.
- ID
- SV-223560r991593_rule
- Version
- ACF2-OS-000240
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Develop a policy application and policy agent to employ a deny-all, allow-by-exception firewall policy for allowing connections to other systems.