+NET.3.2.A6 Protection of Administration Interfaces (B)

NET.3.2.A6 Protection of Administration Interfaces (B)

All administration and management access to firewalls MUST be restricted to individual source IP addresses or address ranges. It MUST be ensured that it is not possible to access administration interfaces from untrustworthy networks.

Only secure protocols MUST be used to manage or monitor firewalls. Alternatively, a dedicated administration network (out-of-band management) MUST be used. Appropriate time limits MUST be specified for the user interfaces.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
blocks G 0.9 Failure or Disruption of Communication Networks
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.21 Manipulation with Hardware or Software
blocks G 0.22 Manipulation of Information
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.25 Failure of Devices or Systems
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.41 Sabotage
blocks G 0.45 Data Loss
blocks G 0.46 Loss of Integrity of Sensitive Information