Skip to content

Fortinet FortiGate Firewall Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-NET-000100-FW-000023

    <GroupDescription></GroupDescription>
    Group
  • The FortiGate firewall must protect the traffic log from unauthorized deletion of local log files and log records.

    &lt;VulnDiscussion&gt;If audit data were to become compromised, forensic analysis and discovery of the true source of potentially malicious system ...
    Rule High Severity
  • SRG-NET-000131-FW-000025

    <GroupDescription></GroupDescription>
    Group
  • The FortiGate firewall must block outbound traffic containing denial-of-service (DoS) attacks to protect against the use of internal information systems to launch any DoS attacks against other networks or endpoints.

    &lt;VulnDiscussion&gt;DoS attacks can take multiple forms but have the common objective of overloading or blocking a network or host to deny or ser...
    Rule Medium Severity
  • SRG-NET-000193-FW-000030

    <GroupDescription></GroupDescription>
    Group

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules