AlgoBuzz Blog

Everything you ever wanted to know about security policy management, and much more.
Categories
Search

More results...

Generic filters
Exact matches only
Search in title
Search in content
Search in excerpt
Filter by Custom Post Type
Posts

Network Security Tip of the Week [17]

Firewall Change Management Information Security IPv6 Security Policy Management Tip of the Week
by Feb 6, 2014

This week’s network security tip is actually a list of firewall policy management recommendations from a Reddit user in the Netsec community. These tips deal with optimizing firewall policies as well as ensuring policies are tightened for an improved security posture. While they may seem obvious to some, you’d be surprised how many firewall policies are not in line with these recommendations.

Thanks to FDD1_S3nt, who suggests the following:

  1. All firewall rulesets should always have a default “deny any any” as the last rule.
  2. IPv6 should be specifically blocked, if it is not being used, and if it is possible on the firewall.
  3. “any” should not be used, unless necessary.
  4. Disable any services that the firewall doesn’t need to run (for example: if you are running Cisco ASA and don’t plan on using ASDM, then don’t enable http service).

Have a network security tip? Send it our way and you may just make it into the AlgoSec blog!

Subscribe to Blog

Receive notifications of new posts by email.

Our Bloggers

View all
Prof. Avishai Wool
101
Tsippi Dach
44
Asher Benbenisty
20
Kyle Wickert
20
Nitin Rajput
4
Malynnda Littky-Porath
4
Avivi Siman Tov
3
Ava Chawla
3
Adel Osta Dadan
3

Professor Wool Educational Videos

Best Practices for Amazon Web Services (AWS) Security

View all

Resources

The KuppingerCole Analyst Report

Hybrid Cloud Environments: The State of Security

See AlgoSec in Action

Network Security Policy Management Lifecycle

Learn how a lifecycle approach improves business agility, reduces risks, and lowers costs

Download

Latest Tweets

You currently have access to a subset of Twitter API v2 endpoints and limited v1.1 endpoints (e.g. media post, oauth) only. If you need access to this endpoint, you may need a different access level. You can learn more here: https://developer.twitter.com/en/portal/product

Archives

Posts