SV-94181r1_rule
V-79475
SRG-NET-000364-FW-000034
SRG-NET-000364-FW-000034
CAT II
10
Establish ingress filters to block or restrict inbound IP packets destined to the control plane of the firewall itself.
Review the device configuration to determine if filters are in place to block loopback addresses.
Verify packets with a destination IP address assigned to the management or loopback address range are blocked (unless the packet has a source address assigned to the management network or network infrastructure).
If inbound IP packets destined to the control plane of the firewall itself are not blocked or restricted by an ingress firewall filter, this is a finding.
V-79475
False
SRG-NET-000364-FW-000034
Review the device configuration to determine if filters are in place to block loopback addresses.
Verify packets with a destination IP address assigned to the management or loopback address range are blocked (unless the packet has a source address assigned to the management network or network infrastructure).
If inbound IP packets destined to the control plane of the firewall itself are not blocked or restricted by an ingress firewall filter, this is a finding.
M
3377