Description
Network engineers change firewall rules at customer sites, often within a short maintenance window. A rule that is too broad can expose a customer's file server or remote desktop to the internet.
Measures
Every rule change is peer reviewed and recorded in a change request before the window. A quarterly scan from outside lists the open ports on customer firewalls, and the exceptions are explained to the customer.