We just had a penetration test and this is one of the items we were "dinged" with a high finding. The issue is listed below. Can anyone help me resolve this, it was the primary that got the flag
2). Restrict Access to OpenNMS Server:
Ensure that all exposed ports used by the OpenNMS server, including the rmi_registry port which exists in default configurations on port 1099, are restricted to only allow communication to the hosts required for its functionality
Is anyone able to point me in the right direction?
2). Restrict Access to OpenNMS Server:
Ensure that all exposed ports used by the OpenNMS server, including the rmi_registry port which exists in default configurations on port 1099, are restricted to only allow communication to the hosts required for its functionality
Is anyone able to point me in the right direction?
Comment