TMA-OPNSENSE-6.2
Ensure Logging is Enabled for Management Plane Deny Rules
MediumLevel 1Manual reviewopnsense
Description
All deny rules targeting firewall management services or MGMT networks must be logged. Management targeting is a high-risk indicator and should generate security alerts.
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
Verify deny rules for MGMT subnets and firewall GUI/SSH ports have logging enabled.
How it is fixed
Fix method: Guidance or infrastructure patch
Enable logging on MGMT deny rules.
Properties
- Operating systems
- Any
- Tags
- loggingopnsense
- Reference
- CIS OPNsense Benchmark v1.0.0 - 6.2 Ensure Logging is Enabled for Management Plane Deny Rules