Implement and Manage a Firewall on End-User Devices

All endpoint devices in the organization should be protected by a properly configured software firewall that monitors traffic, accepts compliant traffic, and monitors users.

A firewall protects against malware and attacks that come from inside or outside your organization's network.

All servers in the organization should be protected by a properly configured software firewall that monitors traffic, accepts compliant traffic, and monitors users.

WAF (web application firewall) should be protecting offered digital services from attacks (e.g. SQL injection).

The organisation must have the following firewall rules configured and documented:

• Firewall will by default block inbound connections
• Firewall rules are accepted and documented by appropriate and authorized individual; the business need must be included in the documentation
• Permissive firewall rules must be removed or disabled quickly when no longer needed