TMA-CHECKPOINT-3.9
Review and Log Implied Rules
Description
Rulebase clarity helps all workers and reviewers. Stating rules explicitly in the rulebase makes policy analysis and review significantly easier. Select the ‗Log Implied Rules‘ to ensure all understand when connectivity is denied or allowed through a subtle Implied Rule.
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
Go to the following path in the Smart Console and verify Log Implied Rules is enabled. Navigate to Global Properties > Firewall Verify Log Implied Rules is enabled
How it is fixed
Fix method: Guidance or infrastructure patch
Go to the following path in the Smart Console and enabled the Log Implied Rules. Navigate to Global Properties > Firewall Enable the Log Implied Rules
Properties
- Operating systems
- Any
- Tags
- checkpointlogging
- Reference
- CIS Check Point Firewall Benchmark v1.1.0 - 3.9 Review and Log Implied Rules