Control Strategy DisableServiceChannel

URI: CSG-DisableServiceChannel

Package: ProcessComms

< prev | next >

Description: Firewall rules that normally allow access to service Service by clients on otherwise blocked network paths are switched off. This strategy represents a permanent restriction introduced by design or in accordance with an operational policy or user preference to avoid accessing Service over certain networks. It may also arise as a side effect of a run-time response to a more specific threat. In either case, it triggers threats representing side effects that would be caused by such a restriction where they affect all available network paths used by a client.

Blocked Threats (2)

SC.IS.SCmSg.8.1

Privileged channel between Client and Service in service: if all routes via gateways plus the final interface to the service host are enabled despite any default firewall rules, then the network path from Client is open and could potentially be exploited in other threats.

SC.IS.SCpSg.8.1

Privileged channel between Client and Service in service: if access to Service from LogicalSubnet is enabled despite any default firewall rules, then the network path from Client is open and could potentially be exploited in other threats.

Triggers Threats (1)

SC.A.SC.6.1

Disabled channel from Client to Service is not available: if the firewall rules allowing access by client Client to service Service have been disabled, then Client will not be able to access Service via that channel.