View Roles (page 394) View a role’s privileges. 

Continue reading from User and Role Management Tutorials (page 384) for additional tutorials on managing users and privileges in MongoDB’s authorization system. 

Auditing Tutorials (page 398) MongoDB Enterprise provides auditing of operations. The tutorials in this section describe procedures to enable and configure the auditing feature. 

Create a Vulnerability Report (page 403) Report a vulnerability in MongoDB. 

## 6.3.1 Network Security Tutorials 

The following tutorials provide information on handling network security for MongoDB. 

Configure Linux iptables Firewall for MongoDB (page 335) Basic firewall configuration patterns and examples for iptables on Linux systems. 

Configure Windows netsh Firewall for MongoDB (page 339) Basic firewall configuration patterns and examples for netsh on Windows systems. 

Configure mongod and mongos for TLS/SSL (page 342) TLS/SSL allows MongoDB clients to support encrypted connections to mongod instances. 

TLS/SSL Configuration for Clients (page 346) Configure clients to connect to MongoDB instances that use TLS/SSL. 

Upgrade a Cluster to Use TLS/SSL (page 350) Rolling upgrade process to use TLS/SSL. 

Configure MongoDB for FIPS (page 351) Configure for Federal Information Processing Standard (FIPS). 

## Configure Linux iptables Firewall for MongoDB 

On contemporary Linux systems, the iptables program provides methods for managing the Linux Kernel’s netfilter or network packet filtering capabilities. These firewall rules make it possible for administrators to control what hosts can connect to the system, and limit risk exposure by limiting the hosts that can connect to a system. 

This document outlines basic firewall configurations for iptables firewalls on Linux. Use these approaches as a starting point for your larger networking organization. For a detailed overview of security practices and risk manage- ment for MongoDB, see Security Concepts (page 320). 

## See also: 

For MongoDB deployments on Amazon’s web services, see the Amazon EC2 27 page, which addresses Amazon’s Security Groups and other EC2-specific security features. 

## Overview 

Rules in iptables configurations fall into chains, which describe the process for filtering and processing specific streams of traffic. Chains have an order, and packets must pass through earlier rules in a chain to reach later rules. This document addresses only the following two chains: 

INPUT Controls all incoming traffic. 

OUTPUT Controls all outgoing traffic. 

