TMA-CHECKPOINT-3.2
Configure a Default Drop/Cleanup Rule
HighLevel 2Manual reviewcheckpoint
Description
Ensure that the final rule in the rulebase explicitly drops all services, destinations, etc not specifically allowed in the previous rules. It is important that any access not explicitly allowed be explicitly dropped.
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
Verify the last rule is present in the rulebase which is denying all traffic from any source to any destination.
How it is fixed
Fix method: Guidance or infrastructure patch
Create or edit the last rule in the rulebase which is denying all traffic from any source to any destination.
Properties
- Operating systems
- Any
- Tags
- checkpointfirewall-policy
- Reference
- CIS Check Point Firewall Benchmark v1.1.0 - 3.2 Configure a Default Drop/Cleanup Rule