---
names: 
  full: "Google GCE Network has Firewall Rules which allow unrestricted RDP access from the Internet"
  contextual: "GCE Network has Firewall Rules which allow unrestricted RDP access from the Internet"
description: "GCP Firewall Rules are specific to a VPC Network. Each rule either allows or denies \
 traffic when its conditions are met. Its conditions allow the user to specify the type of traffic, \ 
 such as ports and protocols, and the source or destination of the traffic, including IP addresses, \ 
 subnets, and instances.\
 Firewall rules are defined at the VPC network level and are specific to the network in which they \ 
 are defined. The rules themselves cannot be shared among networks. Firewall rules only support IPv4 \ 
 traffic. When specifying a source for an ingress rule or a destination for an egress rule by address, \ 
 an IPv4 address or IPv4 block in CIDR notation can be used. Generic (0.0.0.0/0) incoming traffic from \ 
 the Internet to a VPC or VM instance using RDP on Port 3389 can be avoided."
type: COMPLIANCE_POLICY
categories:
  - "SECURITY"
frameworkMappings:
  - /frameworks/cis-gcp-v3.0.0/03/07
  - /frameworks/cloudaware/resource-security/secure-access
similarPolicies:
  cloudConformity:
    - url: "https://www.trendmicro.com/cloudoneconformity-staging/knowledge-base/gcp/CloudVPC/unrestricted-rdp-access.html"
      name: "Check for Unrestricted RDP Access"
