Detections
Analytics

CSCv7|12.2

Title

Scan for Unauthorized Connections across Trusted Network Boundaries

Description

Perform regular scans from outside each trusted network boundary to detect any unauthorized connections which are accessible across the boundary.

Reference Item Details

Category: Boundary Defense

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.2 CISC-RT-000020CiscoCIS Cisco NX OS Switch RTR STIG v1.1.0 CAT II
1.6 CISC-RT-000060CiscoCIS Cisco NX OS Switch RTR STIG v1.1.0 CAT III
2.3.2 Allow only trusted hosts in SNMPv3FortiGateCIS FortiGate 7.4.x v1.0.1 L2
2.3.2 Allow only trusted hosts in SNMPv3FortiGateCIS Fortigate 7.0.x v1.4.0 L2
2.7 Ensure internal sources are blocked on external networksJuniperCIS Juniper OS Benchmark v2.1.0 L2
3.2.1.1 DHCPv4 & DHCPv6 Snooping EnablementArubaOSCIS HPE Aruba Networking CX Switch v1.0.1 Optional Security Recommendations
3.2.1.2 DHCPv6 GuardArubaOSCIS HPE Aruba Networking CX Switch v1.0.1 Optional Security Recommendations
3.3 Ensure firewall policy denying all traffic to/from Tor, malicious server, or scanner IP addresses using ISDBFortiGateCIS FortiGate 7.4.x v1.0.1 L1
3.3 Ensure firewall policy denying all traffic to/from Tor, malicious server, or scanner IP addresses using ISDBFortiGateCIS Fortigate 7.0.x v1.4.0 L1
3.3.6 MSDP SA Cache limitArubaOSCIS HPE Aruba Networking CX Switch v1.0.1 Optional Security Recommendations
3.8 IPv6 Destination GuardArubaOSCIS HPE Aruba Networking CX Switch v1.0.1 Optional Security Recommendations
3.10 Ensure SharePoint database servers are segregated from application server and placed in a secure zone.WindowsCIS Microsoft SharePoint 2019 OS v1.0.0
3.12 Ensure Anti-Spoofing is enabled and action is set to Prevent for all InterfacesCheckPointCIS Check Point Firewall L2 v1.1.0
4.2.1 Spaning Tree BPDU ProtectArubaOSCIS HPE Aruba Networking CX Switch v1.0.1 L1
4.2.1 Spaning Tree BPDU ProtectArubaOSCIS HPE Aruba Networking CX Switch v1.0.1 Optional Security Recommendations
6.1.1 Apply a Trusted Signed Certificate for VPN PortalFortiGateCIS Fortigate 7.0.x v1.4.0 L2