Check Point
TMA-CHECKPOINT-3.6
Ensure no Allow Rule with Any in Source filed present in the Firewall Rules
高级别 2人工审核checkpoint
说明
The Firewall Rules with Any in the Destination field allows accessing all the IP Addresses of Network from specified Sources configured in the Firewall rules for specific services.
检查方式
审计方法: 人工审核
此项建议无法自动检查。当您传入 --include-manual 时，扫描结果会列出该项并附带这些说明。
In SmartConsole review the Access Control policy: verify there are no Accept rules with Any in the Source field. Any such rule must have a documented business justification.
修复方式
修复方法: 操作指南或基础设施补丁
Delete or narrow every Accept rule that has Any in the Source field.
属性
- 操作系统
- 任意
- 标签
- checkpointfirewall-policy
- 参考
- CIS Check Point Firewall Benchmark v1.1.0 - 3.6 Ensure no Allow Rule with Any in Source filed present in the Firewall Rules