Skip to content

III - Administrative Sensitive

Rules and Groups employed by this XCCDF Profile

  • SRG-NET-000364-FW-000035

    <GroupDescription></GroupDescription>
    Group
  • When employed as a premise firewall, FortiGate must block all outbound management traffic.

    &lt;VulnDiscussion&gt;The management network must still have its own subnet in order to enforce control and access boundaries provided by layer 3 n...
    Rule Medium Severity
  • SRG-NET-000364-FW-000036

    <GroupDescription></GroupDescription>
    Group
  • The FortiGate firewall must restrict traffic entering the VPN tunnels to the management network to only the authorized management packets based on destination address.

    &lt;VulnDiscussion&gt;Protect the management network with a filtering firewall configured to block unauthorized traffic. This requirement is simila...
    Rule Medium Severity
  • SRG-NET-000364-FW-000040

    <GroupDescription></GroupDescription>
    Group

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules