TMA-CHECKPOINT-3.1
Enable the Firewall Stealth Rule
YüksekDüzey 2Manuel incelemecheckpoint
Açıklama
Create a rule to drop Any Service from Any Source or Any VPN that attempts to connect to the gateway.
Nasıl denetlenir
Denetim yöntemi: Manuel inceleme
Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.
Login to the Management Server via SmartConsole and create or edit the stealth rule and make sure it is on top of all rules and only allowed sources and services are allowed to access the Gateway.
Nasıl düzeltilir
Düzeltme yöntemi: Kılavuz veya altyapı yaması
Login to the Management Server via SmartDashboard and create or edit the stealth rule, allowed only required IP address to manage the gateway and make sure it is on top of all rules.
Özellikler
- İşletim sistemleri
- Herhangi biri
- Etiketler
- checkpointfirewall-policy
- Referans
- CIS Check Point Firewall Benchmark v1.1.0 - 3.1 Enable the Firewall Stealth Rule