The DataPower Gateway must not use 0.0.0.0 as the management IP address.
An XCCDF Rule
Description
If 0.0.0.0 as the management IP address, the DataPower appliance will listen on all configured interfaces for management traffic. This can allow an attacker to gain privileged-level access from an untrusted network.
- ID
- SV-79679r1_rule
- Version
- WSDP-NM-000143
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
To configure the DataPower appliance for web management:
Using an administrator account, log on to the default domain of the appliance.
On the Configure Web Management Service screen, complete the required information.