---
names: 
  full: "Google GCE Network allows unrestricted SSH traffic"
  contextual: "GCE Network allows unrestricted SSH traffic"
description: "GCP Firewall Rules should not allow unrestricted ingress traffic from\
  \ the internet (0.0.0.0/0) to the SSH port (TCP 22)."
type: "COMPLIANCE_POLICY"
categories:
  - "SECURITY"
frameworkMappings:
  - "/frameworks/cis-gcp-v5.0.0/03/06"
  - "/frameworks/nist-sp-800-53-r4/sc/07"
  - "/frameworks/nist-sp-800-53-r5/ca/09"
  - "/frameworks/nist-sp-800-53-r5/sc/07"
  - "/frameworks/iso-iec-27001-2013/13/01/01"
  - "/frameworks/soc-2/cc6/06/01"
  - "/frameworks/soc-2/cc6/06/04"
  - "/frameworks/hipaa-security-rules/164-312/e-01"
  - "/frameworks/iso-iec-27001-2013/09/04/01"
  - "/frameworks/iso-iec-27001-2022/06/07"
  - "/frameworks/iso-iec-27001-2022/08/01"
  - "/frameworks/iso-iec-27001-2022/08/16"
  - "/frameworks/iso-iec-27001-2022/08/22"
  - "/frameworks/pci-dss-v4.0.1/01/02/05"
  - "/frameworks/pci-dss-v4.0.1/01/02/06"
  - "/frameworks/pci-dss-v4.0.1/01/03/01"
  - "/frameworks/pci-dss-v4.0.1/01/03/02"
  - "/frameworks/pci-dss-v4.0.1/01/04/01"
  - "/frameworks/pci-dss-v4.0.1/01/04/02"
  - "/frameworks/pci-dss-v4.0.1/02/02/07"
  - "/frameworks/cloudaware/resource-security/network-exposure"
similarPolicies:
  internal:
    - dec-x-14c7e63c
  cloudConformity:
    - url: "https://www.trendmicro.com/cloudoneconformity/knowledge-base/gcp/CloudVPC/unrestricted-ssh-access.html"
      name: "Check for Unrestricted SSH Access"