Skip to content
Log In

Install strongswan Package

An XCCDF Rule

Description

The Strongswan package provides an implementation of IPsec and IKE, which permits the creation of secure tunnels over untrusted networks. The strongswan package can be installed with the following command: 
$ sudo zypper install strongswan

Rationale

Providing the ability for remote users or systems to initiate a secure VPN connection protects information when it is transmitted over a wide area network.

ID
xccdf_org.ssgproject.content_rule_package_strongswan_installed
Severity
Medium
References
Updated

Remediation Templates

A Puppet Snippet

include install_strongswan
class install_strongswan {
  package { 'strongswan':
    ensure => 'installed',
  }
}

An Ansible Snippet

- name: Ensure strongswan is installed
  package:
    name: strongswan
    state: present
  tags:
  - CCE-91625-4

OS Build Blueprint

[[packages]]
name = "strongswan"
version = "*"

A Shell Script

zypper install -y "strongswan"