<ul class="list-style">
<li>Audit your first-line-of-defense to validate that the firewalls rules and configurations are effective against cyber threats</li>
<li>Ascertain that firewall rules are aligned to business and IT security policies</li>
</ul>
<p><img src="http://cobaweb.co/project/arimtechV2/contents/tinyMCE/firewall.jpg" alt="" /></p>
<h3>Firewall Documentation and Process:</h3>
<ul class="list-style">
<li>Review of the security access control model that denies access by default, such that explicit access permissions must be specified.</li>
<li>Review of ruleset comments to ensure each provides business justification for the defined rules.</li>
<li>Review the configuration file for the identification and protection of all network segments.</li>
<li>Validate the implementation of open ports and services are required for operations.</li>
<li>Review the security monitoring process and its ability to detect and alert for attempts at or successful unauthorized access where technically feasible.</li>
<li>Review the overall configuration of the firewall to ensure that best practices are fulfilled and the stance of the device is secure.</li>
</ul>
<h3>Control Plane Baselines</h3>
<ul class="list-style">
<li>Review the processes for monitoring and logging that have been implemented on the firewall.</li>
<li>Ensure that encryption and hashing operations, as well as the firmware in use do not have unnecessary vulnerabilities.</li>
<li>Ensure that interactions with other devices meet best practices and offer only secured conversations.</li>
</ul>
<h3>Data Plane Baselines</h3>
<ul class="list-style">
<li>Review all ingress/egress points within the network.</li>
<li>Verify rules have been implemented in accordance with the principle of least privilege.</li>
<li>Verify the use of inspection rules to handle ephemeral ports, and to guard against common attack vectors.</li>
</ul>
<h3>Management Plane Baselines:</h3>
<ul class="list-style">
<li>Ensure default accounts, passwords, and network management authentication strings have been changed and meet complexity standards.</li>
<li>Ensure the organization limits the use of clear text protocols such as Telnet, SNMP v1/v2 and FTP.</li>
<li>Ensure that the implementation of banners, access controls, and appropriate use policies are defined.</li>
<li>Verification that security best practices and hardening techniques have been followed.</li>
<li>Ensure limitation of administrative access is to as few endpoints as possible.</li>
<li>Review controls for default accounts, passwords, and network management community strings.</li>
</ul>
<p>{{brochure-css-detail}}</p>
<p>&nbsp;</p>