CCI-001109
Deny network communications traffic by default and allow network communications traffic by exception at managed interfaces; and/or for organization-defined systems.
1 rule found Severity: Medium
Symantec ProxySG must deny network communications traffic by default and allow network communications traffic by exception (i.e., deny all, permit by exception).
1 rule found Severity: Medium
The NSX-T Distributed Firewall must deny network communications traffic by default and allow network communications traffic by exception (i.e., deny all, permit by exception).
1 rule found Severity: Low
The NSX-T Tier-1 Gateway Firewall must deny network communications traffic by default and allow network communications traffic by exception (i.e., deny all, permit by exception).
2 rules found Severity: Medium
The Arista perimeter router must be configured to deny network traffic by default and allow network traffic by exception.
1 rule found Severity: High
The Cisco perimeter switch must be configured to deny network traffic by default and allow network traffic by exception.
3 rules found Severity: High
The Cisco perimeter router must be configured to deny network traffic by default and allow network traffic by exception.
3 rules found Severity: High
The F5 BIG-IP appliance must deny network communications traffic by default and allow network communications traffic by exception (i.e., deny all, permit by exception).
1 rule found Severity: High
The Juniper perimeter router must be configured to deny network traffic by default and allow network traffic by exception.
2 rules found Severity: High
The perimeter router must be configured to deny network traffic by default and allow network traffic by exception.
1 rule found Severity: High
The ALG must deny network communications traffic by default and allow network communications traffic by exception (i.e., deny all, permit by exception).
1 rule found Severity: Medium
The firewall must deny network communications traffic by default and allow network communications traffic by exception (i.e., deny all, permit by exception).
1 rule found Severity: High
The Juniper SRX Services Gateway Firewall must deny network communications traffic by default and allow network communications traffic by exception (i.e., deny all, permit by exception).
1 rule found Severity: Medium
The Palo Alto Networks security platform must deny network communications traffic by default and allow network communications traffic by exception (i.e., deny all, permit by exception).
1 rule found Severity: Medium
The NSX Tier-0 Gateway Firewall must deny network communications traffic by default and allow network communications traffic by exception.
1 rule found Severity: Medium
The NSX Tier-1 Gateway firewall must deny network communications traffic by default and allow network communications traffic by exception.
1 rule found Severity: Medium