+NET.3.2.A2 Definition of Firewall Rules (B)

NET.3.2.A2 Definition of Firewall Rules (B)

All communications between two given networks MUST pass through a firewall. It MUST be ensured that no unauthorised connections from the outside can be established with a protected network. In addition, unauthorised connections MUST NOT be established from a protected network.

Unambiguous rules MUST be defined for a firewall that specify which communication links and data streams are allowed. Any other connections MUST be prevented by the firewall (whitelist approach). The communication relationships with connected service servers that are routed through the firewall MUST be taken into consideration in its rules.

Persons in charge MUST be appointed to develop, implement, and test filter rules. In addition, it MUST be clear who is allowed to change filter rules. The decisions taken and the relevant information and reasons for them MUST be documented.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
blocks G 0.14 Interception of Information / Espionage
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.39 Malware
blocks G 0.40 Denial of Service
blocks G 0.41 Sabotage
blocks G 0.43 Attack with Specially Crafted Messages
blocks G 0.46 Loss of Integrity of Sensitive Information