Ensure Drop Out of State TCP Packets is enabled

中级别 2人工审核checkpoint

说明

The Drop out of state TCP Packets setting will drop the out of state or non-synchronized TCP Packets for which firewall does not have a matching state table entry.

检查方式

审计方法: 人工审核

此项建议无法自动检查。当您传入 --include-manual 时，扫描结果会列出该项并附带这些说明。

Go to the following path and verify Drop Out of State TCP Packets and Log on Drop is enabled. SmartConsole > Global Properties > Stateful Inspection Verify Drop Out of State TCP Packets and Log on Drop is checked.

修复方式

修复方法: 操作指南或基础设施补丁

Go to the following path and checked the Drop Out of State TCP Packets and Log on Drop. SmartConsole > Global Properties > Stateful Inspection Checked the Drop Out of State TCP Packets and Log on Drop

属性

操作系统: 任意
标签: checkpointhardening
参考: CIS Check Point Firewall Benchmark v1.1.0 - 3.10 Ensure Drop Out of State TCP Packets is enabled