Firewall inbound rule4/6/2024 This may be defined as an IP address, subnet, or range. If allowed inbound exceptions are not limited to authorized remote management hosts, this is a finding.Ĭomputer Configuration > Windows Settings > Security Settings > Windows Defender Firewall with Advanced Security > Windows Defender Firewall with Advanced Security > Inbound Rules (this link will be in the right pane)įor any inbound rules that allow connections view the Scope for Remote IP address. Verify firewall exceptions to inbound connections on domain workstations include only authorized remote management hosts. Windows 10 Security Technical Implementation Guide Limiting inbound connections only from authorized remote management systems will help limit this exposure. Allowing inbound access to domain workstations from other systems may allow lateral movement across systems if credentials are compromised.
0 Comments
Leave a Reply.AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |