Check Point
TMA-CHECKPOINT-3.2
Configure a Default Drop/Cleanup Rule
高等級 2人工審核checkpoint
說明
Ensure that the final rule in the rulebase explicitly drops all services, destinations, etc not specifically allowed in the previous rules. It is important that any access not explicitly allowed be explicitly dropped.
檢查方式
稽核方法: 人工審核
此項建議無法自動檢查。當您傳入 --include-manual 時，掃描結果會列出此項目並附帶這些說明。
Verify the last rule is present in the rulebase which is denying all traffic from any source to any destination.
修補方式
修補方法: 操作指南或基礎設施修補檔
Create or edit the last rule in the rulebase which is denying all traffic from any source to any destination.
屬性
- 作業系統
- 不限
- 標籤
- checkpointfirewall-policy
- 參考資料
- CIS Check Point Firewall Benchmark v1.1.0 - 3.2 Configure a Default Drop/Cleanup Rule