Control: 2.5 Ensure the default security list of every VCN restricts all traffic except ICMP

Description

A default security list is created when a Virtual Cloud Network (VCN) is created. Security lists provide stateful filtering of ingress and egress network traffic to OCI resources. It is recommended no security list allows unrestricted ingress access to Secure Shell (SSH) via port 22.

Remediation

From Console

1. Login to OCI Console.
2. Click on Networking -> Virtual Cloud Networks.
3. For each VCN listed Click on Security Lists.
4. Click on Default Security List for <VCN Name>.
5. Select the Ingress Rule with 'Source 0.0.0.0/0, IP Protocol 22 and Destination Port Range 22'
6. Click Remove.
7. Verify that you want to remove by clicking Remove.