Firewalls are a primary line of defence for many organisations, therefore ensuring they are as hardened as possible is critical. Our Firewall Security Reviews cover the following security issues:
- Overly permissive rules
- Unintentionally exposed services
- Insecure cryptographic options
- Default credentials
- Default services enabled, e.g. SNMP
- Exposed administrative interfaces
Whilst the process of locking down a ruleset to only the minimum rules necessary seems simple on the face of it; things sometimes go wrong. With test rules accidentally left in place, rules being configured to be broader than intended, or just changes made over time leading to a looser ruleset than desired. An independent firewall configuration security review will help tighten things back up.