CSS Clusters Have Access Control Enabled

Rule Details

Applicable Scenario

If a CSS cluster has access control disabled, it is publically accessible by all IP addresses. If the access control is enabled, it is only accessible by whitelisted IP addresses over public networks. For details, see Configuring Public Network Access.

Solution

You can enable access control for noncompliant CSS clusters and configure an IP address white list to allow public access.

Rule Logic

• If a CSS cluster does not have pubic access enabled, this cluster is compliant.
• If a CSS cluster has public access enabled but does not have access control enabled, this cluster is noncompliant.
• If a CSS cluster has both public access and access control enabled, this cluster is compliant.