TMAegis
Više pravila za checkpoint

TMA-CHECKPOINT-3.1

Enable the Firewall Stealth Rule

VisokaNivo 2Ručni pregledcheckpoint

Opis

Create a rule to drop Any Service from Any Source or Any VPN that attempts to connect to the gateway.

Kako se proverava

Metod provere: Ručni pregled

Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.

Login to the Management Server via SmartConsole and create or edit the stealth rule and make sure it is on top of all rules and only allowed sources and services are allowed to access the Gateway.

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Login to the Management Server via SmartDashboard and create or edit the stealth rule, allowed only required IP address to manage the gateway and make sure it is on top of all rules.

Svojstva

Operativni sistemi
Bilo koji
Oznake
checkpointfirewall-policy
Referenca
CIS Check Point Firewall Benchmark v1.1.0 - 3.1 Enable the Firewall Stealth Rule