Matching L3SSg2-b

URI: MP-L3SSg2-b

Package: NetworkConnectivity

< prev | next >

Description: Finds a gateway from one IP subnet to a second IP subnet, along with the segment asset representing the route via the gateway, where this route is not blocked by default.

Root Pattern: R-L3SSg2

R-L3SSg2

Finds a gateway from one IP subnet to an IP subnet, along with the segment asset representing the route via the gateway.

Threat Patterns (3)

Sg.DA.L3SSg2-b.8

Routing between FromSubnet and ToSubnet via Gateway is enabled by default: if this route between IP subnets is enabled for all communications, it could be exploited by an attacker.

Sg.TA.L3SSg2-b.8.1

Service connections from FromSubnet to ToSubnet via Gateway allowed by default: if the route via Gateway from FromSubnet to ToSubnet is not blocked, then service connections cannot be blocked.

Sg.TA.L3SSg2-b.8.2

Service connection routing from FromSubnet to ToSubnet via Gateway is allowed by exception: if the route via Gateway from FromSubnet to ToSubnet is blocked by a default firewall policy, then port forwarding is normally used to allow connections where expected between legitimate clients and services.