← Back to VMware vRealize Automation 7.x SLES Security Technical Implementation Guide

V-240454

CAT II (Medium)

The SLES for vRealize must not have Teredo enabled.

Rule ID

SV-240454r671103_rule

STIG

VMware vRealize Automation 7.x SLES Security Technical Implementation Guide

Version

V2R2

CCIs

CCI-000382

Discussion

Teredo is an IPv6 transition mechanism that involves tunneling IPv6 packets encapsulated in IPv4 packets. Unauthorized tunneling may circumvent network security.

Check Content

Verify the Teredo service is not running:

ps ax | grep teredo | grep -v grep

If the Teredo process is running, this is a finding.

Fix Text

Kill the Teredo service.

Edit startup scripts to prevent the service from running on startup. 

For Appliance OS, Teredo is not included by default, this is not a finding.