+NET.3.1.A18 Configuration of Access Control Lists (S)

NET.3.1.A18 Configuration of Access Control Lists (S)

Access to routers and switches SHOULD be defined with the help of access control lists (ACLs). Based on the security policy of the organisation in question, the ACL SHOULD define which IT systems or networks (and corresponding methods) may be used to access a router or switch. If there are no specific rules, a restrictive whitelist approach SHOULD be preferred as a matter of principle.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
blocks G 0.9 Failure or Disruption of Communication Networks
blocks G 0.25 Failure of Devices or Systems
blocks G 0.40 Denial of Service
blocks G 0.43 Attack with Specially Crafted Messages
blocks G 0.45 Data Loss
blocks G 0.46 Loss of Integrity of Sensitive Information