Misconfigured customer firewall exposes an internal service
RSK-006
-
Last updated
Treating
Description
Network engineers change firewall rules at customer sites, often within a short maintenance window. A rule that is too broad can expose a customer's file server or remote desktop to the internet.
Measures
Every rule change is peer reviewed and recorded in a change request before the window. A quarterly scan from outside lists the open ports on customer firewalls, and the exceptions are explained to the customer.