TMAegis
More rules for checkpoint

TMA-CHECKPOINT-2.1.5

Ensure unused interfaces are disabled

MediumLevel 1Manual reviewcheckpoint

Description

Disables the unused interfaces.

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

In clish run 'show interfaces all' (or Network Management > Network Interfaces) and confirm every interface that is not in use has state off ('set interface <if> state off').

How it is fixed

Fix method: Guidance or infrastructure patch

Run the following command disable the unused interface. CLI: set interface <Interface_Number> state off GUI: Navigate to Network Management > Network Interfaces > Open unused Interface > unchecked Enable

Properties

Operating systems
Any
Tags
checkpointmanagement
Reference
CIS Check Point Firewall Benchmark v1.1.0 - 2.1.5 Ensure unused interfaces are disabled