TMA-SOPHOS-5.10
Ensure No Firewall Rules with source 'ANY', service 'ANY' and destination 'ANY' from 'WAN' Zone
Açıklama
Allowed firewall rules with no specific source or ANY service definitions from WAN/untrusted zone could lead to unintended exposure to the outside threats. Reviewed in the Sophos Firewall web admin console (SFOS has no plain-text configuration export to audit offline).
Nasıl denetlenir
Denetim yöntemi: Manuel inceleme
Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.
Navigate to 'Protect > Rules and policies > Firewall rules'. Filter 'Destination zone' to 'LAN' or 'DMZ'. Verify that no allowed firewall rules from 'WAN' zone with service definition 'ANY' to 'LAN' or 'DMZ' zone with destination network set to 'ANY'.
Nasıl düzeltilir
Düzeltme yöntemi: Kılavuz veya altyapı yaması
Navigate to 'Protect > Rules and policies > Firewall rules'. Filter 'Destination zone' to 'LAN' or 'DMZ'. Remove allowed firewall rules from 'WAN' zone with service definition 'ANY' to 'LAN' or 'DMZ' zone with destination network set to 'ANY'. Or change the rule to specific source/destination with target service definition.
Özellikler
- İşletim sistemleri
- Herhangi biri
- Etiketler
- sophosfirewall-policy
- Referans
- CIS Sophos Firewall v22 Benchmark v1.0.0 - 5.10 Ensure No Firewall Rules with source 'ANY', service 'ANY' and destination 'ANY' from 'WAN' Zone