Ensure unused interfaces are disabled

中级别 1人工审核checkpoint

说明

Disables the unused interfaces.

检查方式

审计方法: 人工审核

此项建议无法自动检查。当您传入 --include-manual 时，扫描结果会列出该项并附带这些说明。

In clish run 'show interfaces all' (or Network Management > Network Interfaces) and confirm every interface that is not in use has state off ('set interface <if> state off').

修复方式

修复方法: 操作指南或基础设施补丁

Run the following command disable the unused interface. CLI: set interface <Interface_Number> state off GUI: Navigate to Network Management > Network Interfaces > Open unused Interface > unchecked Enable

属性

操作系统: 任意
标签: checkpointmanagement
参考: CIS Check Point Firewall Benchmark v1.1.0 - 2.1.5 Ensure unused interfaces are disabled