TMA-CHECKPOINT-3.2
Configure a Default Drop/Cleanup Rule
TinggiLevel 2Tinjauan manualcheckpoint
Deskripsi
Ensure that the final rule in the rulebase explicitly drops all services, destinations, etc not specifically allowed in the previous rules. It is important that any access not explicitly allowed be explicitly dropped.
Cara pemeriksaan
Metode audit: Tinjauan manual
Rekomendasi ini tidak dapat diperiksa secara otomatis. Pemindaian akan menampilkannya beserta petunjuk ini saat Anda memberikan opsi --include-manual.
Verify the last rule is present in the rulebase which is denying all traffic from any source to any destination.
Cara perbaikan
Metode perbaikan: Panduan atau patch infrastruktur
Create or edit the last rule in the rulebase which is denying all traffic from any source to any destination.
Properti
- Sistem operasi
- Apa saja
- Tag
- checkpointfirewall-policy
- Referensi
- CIS Check Point Firewall Benchmark v1.1.0 - 3.2 Configure a Default Drop/Cleanup Rule