Enable the Firewall Stealth Rule

高级别 2人工审核checkpoint

说明

Create a rule to drop Any Service from Any Source or Any VPN that attempts to connect to the gateway.

检查方式

审计方法: 人工审核

此项建议无法自动检查。当您传入 --include-manual 时，扫描结果会列出该项并附带这些说明。

Login to the Management Server via SmartConsole and create or edit the stealth rule and make sure it is on top of all rules and only allowed sources and services are allowed to access the Gateway.

修复方式

修复方法: 操作指南或基础设施补丁

Login to the Management Server via SmartDashboard and create or edit the stealth rule, allowed only required IP address to manage the gateway and make sure it is on top of all rules.

属性

操作系统: 任意
标签: checkpointfirewall-policy
参考: CIS Check Point Firewall Benchmark v1.1.0 - 3.1 Enable the Firewall Stealth Rule