+NET.3.2.A3 Configuring Appropriate Filter Rules on the Packet Filter (B)

NET.3.2.A3 Configuring Appropriate Filter Rules on the Packet Filter (B)

Based on the firewall rules from NET.3.2.A2 Definition of Firewall Rules, appropriate filter rules must be defined and configured for the packet filter.

A packet filter MUST be configured to discard any invalid TCP flag combinations. As a matter of principle, filtering MUST always be performed in a stateful manner. Stateful filter rules MUST also be configured for the connectionless protocols UDP and ICMP. A firewall MUST filter the ICMP and ICMPv6 protocols restrictively.

1. Yleiskatsaus

1.1 Viittaukset

1.2 Tunnistetut vaatimukset

1.3 Liittyvät säädökset

2. Tunnistetut vaatimukset

Vaatimukset

3. Liittyvät säädökset

Säädökset

Linkitetyt tehtävät

Linkit
blocks G 0.14 Interception of Information / Espionage
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.39 Malware
blocks G 0.40 Denial of Service
blocks G 0.41 Sabotage
blocks G 0.43 Attack with Specially Crafted Messages
blocks G 0.46 Loss of Integrity of Sensitive Information