Check Point
TMA-CHECKPOINT-3.1
Enable the Firewall Stealth Rule
TinggiLevel 2Tinjauan manualcheckpoint
Deskripsi
Create a rule to drop Any Service from Any Source or Any VPN that attempts to connect to the gateway.
Cara pemeriksaan
Metode audit: Tinjauan manual
Rekomendasi ini tidak dapat diperiksa secara otomatis. Pemindaian akan menampilkannya beserta petunjuk ini saat Anda memberikan opsi --include-manual.
Login to the Management Server via SmartConsole and create or edit the stealth rule and make sure it is on top of all rules and only allowed sources and services are allowed to access the Gateway.
Cara perbaikan
Metode perbaikan: Panduan atau patch infrastruktur
Login to the Management Server via SmartDashboard and create or edit the stealth rule, allowed only required IP address to manage the gateway and make sure it is on top of all rules.
Properti
- Sistem operasi
- Apa saja
- Tag
- checkpointfirewall-policy
- Referensi
- CIS Check Point Firewall Benchmark v1.1.0 - 3.1 Enable the Firewall Stealth Rule