12 new national NIS2 framework versions published! Read more ->
Cyberday back to normal - related blog
The organisation must routinely prevent access to the administrative interface (used to manage firewall configuration) from the Internet, unless there is a clear and documented business need and the interface is protected by one of the following controls: o a second authentication factor, such as a one-time token o an IP allow list that limits access to a small range of trusted addresses
The organisation must change the default password, which is used to login into firewall management interface, to something not easily guessed. Alternatively, organisation can block remote access to the management interface.
The organisation must not allow remote access if it is not properly and clearly documented and needed for business operations. In this case the system must be protected with multi factor authentication or with whitelisting only the necessary IP-addresses.
.png)
