STIGQter: STIG Summary: Canonical Ubuntu 24.04 LTS Security Technical Implementation Guide Version: 1 Release: 6 Benchmark Date: 01 Jul 2026:

Ubuntu 24.04 LTS must have an application firewall installed in order to control remote access methods.

DISA Rule

SV-270654r1067143_rule

Vulnerability Number

V-270654

Group Title

SRG-OS-000297-GPOS-00115

Rule Version

UBTU-24-100300

Severity

CAT II

CCI(s)

• CCI-002314 - Employ automated mechanisms to control remote access methods.

Weight

10

Fix Recommendation

Install the ufw by using the following command:

$ sudo apt install -y ufw

Check Contents

Verify that the Uncomplicated Firewall (ufw) is installed with the following command:

$ dpkg -l | grep ufw
ii ufw 0.36.2-6 all program for managing a Netfilter firewall

If the "ufw" package is not installed, ask the system administrator if another application firewall is installed.

If no application firewall is installed, this is a finding.

Vulnerability Number

V-270654

Documentable

False

Rule Version

UBTU-24-100300

Severity Override Guidance

Verify that the Uncomplicated Firewall (ufw) is installed with the following command:

$ dpkg -l | grep ufw
ii ufw 0.36.2-6 all program for managing a Netfilter firewall

If the "ufw" package is not installed, ask the system administrator if another application firewall is installed.

If no application firewall is installed, this is a finding.

Check Content Reference

M

Target Key

5673