+NET.3.2.A4 Secure Firewall Configuration (B)

NET.3.2.A4 Secure Firewall Configuration (B)

Before a firewall is used, it MUST be configured securely. All configuration changes MUST be documented transparently. The integrity of the configuration files MUST be protected appropriately. Before access passwords are stored, they MUST be secured using an up-to-date cryptographic method (see CON.1 Crypto Concept). A firewall MUST be configured in such a way that only the services absolutely required are available. If functional extensions are used, the security policies of the organisation in question MUST continue to be met. The use of such extensions MUST also be justified and documented. Any unnecessary (information) services and functional extensions MUST be disabled or uninstalled completely. Information on internal configurations and operating statuses MUST be hidden from third parties whenever possible.

1. Přehled

1.1 Odkazy

1.2 Identifikované požadavky

1.3 Související regulace

2. Identifikované požadavky

Požadavky

3. Související regulace

Regulace

Propojené úkoly

Vazby
blocks G 0.9 Failure or Disruption of Communication Networks
blocks G 0.14 Interception of Information / Espionage
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.21 Manipulation with Hardware or Software
blocks G 0.22 Manipulation of Information
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.25 Failure of Devices or Systems
blocks G 0.26 Malfunction of Devices or Systems
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.41 Sabotage
blocks G 0.45 Data Loss
blocks G 0.46 Loss of Integrity of Sensitive Information