TMA-CHECKPOINT-2.1.9
Ensure Telnet is disabled
HighLevel 1Automatedcheckpoint
Description
Disables the telnet access to the security appliance in the case it has been configured. FAILs if Telnet is enabled (set net-access telnet on). Audited against the Gaia clish 'show configuration' output (run 'show configuration' in clish on each gateway and management server and save the full output).
How it is checked
Audit method: Configuration pattern
- Pattern
(?m)^set net-access telnet on[ \t]*$
How it is fixed
Fix method: Guidance or infrastructure patch
set net-access telnet off save config # CIS guidance: Run the following command to disable the telnet. CLI: set net-access telnet off GUI: Navigate to System Management > Network Access > verify Enable Telnet is unchecked.
Properties
- Operating systems
- Any
- Tags
- checkpointmanagement
- Reference
- CIS Check Point Firewall Benchmark v1.1.0 - 2.1.9 Ensure Telnet is disabled
Check this host
Run this on a machine you are allowed to audit. The scan is read-only.
shell
tmaegis scan --target checkpoint