Misconfigured customer firewall exposes an internal service

Network engineers change firewall rules at customer sites, often within a short maintenance window. A rule that is too broad can expose a customer's file server or remote desktop to the internet.

Measures

Every rule change is peer reviewed and recorded in a change request before the window. A quarterly scan from outside lists the open ports on customer firewalls, and the exceptions are explained to the customer.