STIGQter: STIG Summary: Riverbed NetIM OS Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 11 Sep 2025:

Ubuntu OS must restrict SSH access to allow only NetIM internal communication.

DISA Rule

SV-275617r1148290_rule

Vulnerability Number

V-275617

Group Title

SRG-OS-000481-GPOS-00481

Rule Version

RIIM-OS-255010

Severity

CAT II

CCI(s)

• CCI-002418 - Protect the confidentiality and/or integrity of transmitted information.
• CCI-002420 - Maintain the confidentiality and/or integrity of information during preparation for transmission.
• CCI-002422 - Maintain the confidentiality and/or integrity of information during reception.

Weight

10

Fix Recommendation

Deny all other SSH connections and allow SSH connections from a specific IP address by using the following commands. Allow from NetIM core/worker(s)/manager in a base configuration with UFW allow.

$ sudo ufw deny from any to any port 22
$ sudo ufw allow from <NETIM_IP_ADDRESS node list> to any port 22

Where NETIM_IP_ADDRESS list are the list of NETIM IP addresses for all nodes.

Note: This will restrict system admins to use of the CONSOLE mechanism available depending on the Virtual Platform being used.

Check Contents

Verify firewall rule exists to restrict SSH to allow specific IP addresses only by using the following commands:

$ sudo ufw status

If a firewall rule does not exist to restrict port 22 to allow specific IP addresses and deny all other address, this is a finding.

Vulnerability Number

V-275617

Documentable

False

Rule Version

RIIM-OS-255010

Severity Override Guidance

Verify firewall rule exists to restrict SSH to allow specific IP addresses only by using the following commands:

$ sudo ufw status

If a firewall rule does not exist to restrict port 22 to allow specific IP addresses and deny all other address, this is a finding.

Check Content Reference

M

Target Key

5706