+Firewall

Firewall

A gateway that limits access between networks in accordance with local security policy.

In ICS networks, firewalls can exist in multiple locations in the network architecture and serve a variety of purposes. The first, and often the most important, is the firewall segmenting the ICS network from the business network. This firewall acts as the primary network boundary point that controls the ingress/egress of network traffic between the ICS and business networks. This firewall may also be a single device connected to multiple network segments, where the firewall defines individual zones for the different network segments and can control access to the zones and between the zones. This can limit the ability of an adversary to traverse a network.

1. Vue d’ensemble

Intitulé Norme

1.1 Références

1.2 Exigences identifiées

1.3 Réglementations associées

2. Exigences identifiées

Exigences
Source Exigence

3. Réglementations associées

Réglementations
Source Réglementation

Tickets liés

Liens
Type de lien Ticket
is related to Assets
is related to Indicator Removal on Host
is related to Execution through API
is related to Ethernet
is related to External Remote Services
is related to Denial of Service
is related to Data Destruction
is related to Exploitation for Evasion
is related to Network Sniffing
is related to Data from Local System
is related to Internet Accessible Device
is related to Graphical User Interface
is related to Adversary-in-the-Middle
is related to Service Stop
is related to System Firmware
is related to Wi-Fi
is related to Network Connection Enumeration
is related to Change Credential
is related to Multicast Discovery
is related to Valid Accounts
is related to Scripting
is related to Exploitation for Privilege Escalation
is related to Exploitation of Remote Services
is related to Supply Chain Compromise
is related to Broadcast Discovery
is related to Commonly Used Port
is related to Default Credentials
is related to Native API
is related to Exploit Public-Facing Application
is related to Connection Proxy
is related to Insecure Credentials
is related to Rootkit
is related to Device Restart/Shutdown
is related to Port Scan
is related to Standard Application Layer Protocol
is related to Command-Line Interface
is related to Block Communications
is related to Hooking
is related to Remote System Discovery
is related to Remote System Information Discovery
is related to Command and Scripting Interpreter
is related to Unix Shell
is related to JavaScript
is related to Python
is related to PowerShell
is related to Windows Command Shell
is related to Visual Basic
is related to Publish/Subscribe Protocols
is related to DNS
  • MITREATTACK -

    EN: MITRE ATT&CK®, https://attack.mitre.org/. © 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation. License: The MITRE Corporation (MITRE) hereby grants you a non-exclusive, royalty-free license to use ATT&CK® for research, development, and commercial purposes. Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. See the Terms of Use for the disclaimers. ATT&CK® is a registered trademark of The MITRE Corporation. Converted into the GRCA format.

    DE: MITRE ATT&CK®, https://attack.mitre.org/. © 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation. MITRE erlaubt die Nutzung für Forschung, Entwicklung und kommerzielle Zwecke, wenn jede Kopie den Urheberrechtsvermerk und die Lizenz enthält; maßgeblich ist der englische Wortlaut der Lizenz oben und die Terms of Use mit den Haftungsausschlüssen. ATT&CK® ist eine eingetragene Marke der MITRE Corporation. In das GRCA-Format umgewandelt.