Firewalls are a primary line of defence for many organisations, therefore ensuring they are as hardened as possible is critical. Our Firewall Security Reviews cover the following security issues:
- Overly permissive rules
- Unintentionally exposed services
- Insecure cryptographic options
- Default credentials
- Default services enabled, e.g. SNMP
- Exposed administrative interfaces
- Missing firmware and software security updates
Whilst the process of locking down a ruleset to only the minimum rules necessary seems simple on the face of it, things sometimes go wrong, with test rules accidentally left in place, rules being configured to be broader than intended, or just changes made over time leading to a looser ruleset than desired. An independent firewall configuration security review will help tighten things back up.