documentation_complete: true


title: 'Enable the SuSEfirewall 2'

description: |-
    {{{ describe_service_enable(service="SuSEfirewall2") }}}

rationale: |-
    To prevent unauthorized connection of devices, unauthorized transfer of
    information, or unauthorized tunneling (i.e., embedding of data types
    within data types), organizations must disable or restrict unused or
    unnecessary physical and logical ports/protocols on information systems.

    SUSE operating systems are capable of providing a wide variety of functions
    and services. Some of the functions and services provided by default may
    not be necessary to support essential organizational operations.
    Additionally, it is sometimes convenient to provide multiple services from
    a single component (e.g., VPN and IPS); however, doing so increases risk
    over limiting the services provided by any one component.

severity: medium

identifiers:
    cce@sle12: CCE-83164-4

references:
    nist@sle12: CM-7,CA-3(5),AC-17(1)
    srg: SRG-OS-000420-GPOS-00186,SRG-OS-000096-GPOS-00050
    stigid@sle12: SLES-12-030030

ocil: |-
    {{{ ocil_service_enabled(service="SuSEfirewall2") }}}

template:
    name: service_enabled
    vars:
        servicename: SuSEfirewall2
