STIGQter: STIG Summary: HYCU Protege Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 01 Jul 2026:

The HYCU virtual appliance must enforce approved authorizations for controlling the flow of management information within the appliance based on information flow control policies.

DISA Rule

SV-268225r1137875_rule

Vulnerability Number

V-268225

Group Title

SRG-APP-000038-NDM-000213

Rule Version

HYCU-ND-000070

Severity

CAT II

CCI(s)

• CCI-001368 - Enforce approved authorizations for controlling the flow of information within the system based on organization-defined information flow control policies.
• CCI-004192 - Protect nonlocal maintenance sessions by separating the maintenance session from other network sessions with the system by logically separated communications paths.

Weight

10

Fix Recommendation

Enable the firewall by executing the following commands:
sudo systemctl enable firewalld

sudo systemctl start firewalld

Check Contents

Verify the firewall is running by executing the following command:
sudo firewall-cmd --state

If service is not running, this is a finding.

Determine which services and ports are open by executing the following command:
sudo firewall-cmd --list-all

Output should show the following two lines:

'services: cockpit dhcpv6-client iscsi-target samba ssh'
'ports: 8443/tcp'

If more services than those listed above are open, this is a finding.

Vulnerability Number

V-268225

Documentable

False

Rule Version

HYCU-ND-000070

Severity Override Guidance

Verify the firewall is running by executing the following command:
sudo firewall-cmd --state

If service is not running, this is a finding.

Determine which services and ports are open by executing the following command:
sudo firewall-cmd --list-all

Output should show the following two lines:

'services: cockpit dhcpv6-client iscsi-target samba ssh'
'ports: 8443/tcp'

If more services than those listed above are open, this is a finding.

Check Content Reference

M

Target Key

5660