TMA-CHECKPOINT-2.1.5
Ensure unused interfaces are disabled
MediumLevel 1Manual reviewcheckpoint
Description
Disables the unused interfaces.
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
In clish run 'show interfaces all' (or Network Management > Network Interfaces) and confirm every interface that is not in use has state off ('set interface <if> state off').
How it is fixed
Fix method: Guidance or infrastructure patch
Run the following command disable the unused interface. CLI: set interface <Interface_Number> state off GUI: Navigate to Network Management > Network Interfaces > Open unused Interface > unchecked Enable
Properties
- Operating systems
- Any
- Tags
- checkpointmanagement
- Reference
- CIS Check Point Firewall Benchmark v1.1.0 - 2.1.5 Ensure unused interfaces are disabled