💼 4.6 Ensure That IP Forwarding Is Not Enabled on Instances - Level 1 (Automated)
- ID:
/frameworks/cis-gcp-v4.0.0/04/06
Description
Compute Engine instance cannot forward a packet unless the source IP address of the packet matches
the IP address of the instance. Similarly, GCP won't deliver a packet whose destination IP address
is different than the IP address of the instance receiving the packet. However, both capabilities
are required if you want to use instances to help route packets.
Forwarding of data packets should be disabled to prevent data loss or information disclosure.
Similar
- Sections
/frameworks/cis-gcp-v3.0.0/04/06
Similar Sections (Take Policies From)
Similar Sections (Give Policies To)
Sub Sections
| Section | Sub Sections | Internal Rules | Policies | Flags | Compliance |
|---|
Policies (1)