Control Strategy BlockInterface

URI: CSG-BlockInterface

Description: Apply a default firewall rule at host Host to drop messages sent to the host from subnet LogicalSubnet, unless they are service requests or responses.

(empty)

I.DA.I.8

Access to Host from LogicalSubnet enabled: if the network connection between Host and LogicalSubnet is in service, then messages addressed to Host will be accepted via that connection, unless blocked by a firewall policy.

H.W.HIoH.3

Remote malware exploit on device Host from LogicalSubnet: an attacker with access to subnet LogicalSubnet sends a message containing malicious content designed to exploit a bug in Host and install itself there, without authentication.

H.W.HRoH.3

Remote malware exploit on device Host from RemoteHost: malware on device RemoteHost sends a message containing malicious content designed to exploit a bug in Host and install itself there, without authentication.

I.TA.I.8.2

Access to services on Host from LogicalSubnet enabled by exception: if the interface between Host and LogicalSubnet is in service, then even if connections to Host via that interface are blocked by default, connections to services running on Host will be allowed unless explicitly disabled.

FWBlock at Role_Interface

Control Strategy BlockInterface

Mitigated Threats (0)

Blocked Threats (3)

I.DA.I.8

H.W.HIoH.3

H.W.HRoH.3

Triggers Threats (1)

I.TA.I.8.2

Control Sets (1)