<Group id="network-ipsec">
<title>IPSec Support</title>
<description>Support for Internet Protocol Security (IPsec)
is provided in Red Hat Enterprise Linux 6 with Openswan.
</description>

<Rule id="package_openswan_installed">
<title>Install openswan Package</title>
<description>The Openswan package provides an implementation of IPsec
and IKE, which permits the creation of secure tunnels over
untrusted networks. <package-install-macro package="openswan"/> 
</description>
<ocil clause="the package is not installed" >
<package-check-macro package="openswan" />
</ocil>
<rationale>Providing the ability for remote users or systems
to initiate a secure VPN connection protects information when it is
transmitted over a wide area network.
</rationale>
<ident cce="27626-1"  stig="RHEL-06-000321" />
<oval id="package_openswan_installed" />
<ref nist="AC-17, MA-4, SC-8" disa="1130,1131" />
</Rule>
</Group>

