Skip to main content

💼 4.6 Ensure that IP forwarding is not enabled on Instances - Level 1 (Automated)

  • Contextual name: 💼 4.6 Ensure that IP forwarding is not enabled on Instances - Level 1 (Automated)
  • ID: /frameworks/cis-gcp-v1.2.0/04/06
  • Located in: 💼 4 Virtual Machines

Description​

Compute Engine instance cannot forward a packet unless the source IP address of the packet matches the IP address of the instance. Similarly, GCP won't deliver a packet whose destination IP address is different than the IP address of the instance receiving the packet. However, both capabilities are required if you want to use instances to help route packets.

Forwarding of data packets should be disabled to prevent data loss or information disclosure.

Similar​

  • Sections
    • /frameworks/cis-gcp-v1.3.0/04/06
  • Internal
    • ID: dec-c-09b08a72

Similar Sections (Take Policies From)​

SectionSub SectionsInternal RulesPoliciesFlags
💼 CIS GCP v1.3.0 → 💼 4.6 Ensure That IP Forwarding Is Not Enabled on Instances - Level 1 (Automated)1

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlags
💼 CIS GCP v1.3.0 → 💼 4.6 Ensure That IP Forwarding Is Not Enabled on Instances - Level 1 (Automated)1

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags

Policies (1)​

PolicyLogic CountFlags
📝 Google GCE Instance IP Forwarding is not disabled. 🟢1🟢 x6