---
names: 
  full: "Google GCE Network allows unrestricted DNS traffic"
  contextual: "GCE Network allows unrestricted DNS traffic"
description: "GCP Firewall Rules should not allow unrestricted ingress traffic from\
  \ the internet (0.0.0.0/0) to the DNS port (53)."
type: "COMPLIANCE_POLICY"
categories:
  - "SECURITY"
frameworkMappings:
  - "/frameworks/nist-sp-800-53-r4/sc/07"
  - "/frameworks/iso-iec-27001-2013/13/01/01"
  - "/frameworks/iso-iec-27001-2013/09/01/02"
  - "/frameworks/pci-dss-v4.0.1/01/04/01"
  - "/frameworks/pci-dss-v4.0.1/01/04/02"
  - "/frameworks/soc-2/cc6/01/07"
  - "/frameworks/soc-2/cc6/06/01"
  - "/frameworks/cloudaware/resource-security/network-exposure"
similarPolicies:
  internal:
    - dec-x-4f36e2c1