see cis rhel 5.5 documentation and latest version of it for configuration examples. or use compensative controls.
is it really sampled? usually no ;)
eero, rhce