highservicesverified ✓rollback-safe
Enable firewalld service
service-enable-firewalld · RHEL ≥ 8 · 1 impl
Description
The firewalld service provides a dynamic firewall with support for zones. A host-based firewall is essential for defense in depth.
Rationale
A host-based firewall provides an additional layer of defense against network attacks, even when network firewalls are in place.
Check → Remediate
Checkservice_state
- name:
- firewalld
- active:
- true
- enabled:
- true
Remediateservice_enabled
- name:
- firewalld
Framework references
CIS
rhel8 4.1.3rhel10 4.1.3
STIG
V-257936 / RHEL-09-251015V-244544V-280956 / RHEL-10-200531
NIST 800-53
SC-7CM-7
Live verification
rhel10:checkrhel8:checkrhel9:check
#service#firewall#security