Skip to main content

๐Ÿ’ผ [NetworkFirewall.5] The default stateless action for Network Firewall policies should be drop or forward for fragmented packets

  • Contextual name: ๐Ÿ’ผ [NetworkFirewall.5] The default stateless action for Network Firewall policies should be drop or forward for fragmented packets

  • ID: /frameworks/aws-fsbp-v1.0.0/network-firewall/05

  • Located in: ๐Ÿ’ผ Network Firewall

Descriptionโ€‹

A firewall policy defines how your firewall monitors and handles traffic in Amazon VPC. You configure stateless and stateful rule groups to filter packets and traffic flows. Defaulting to Pass can allow unintended traffic.

Similarโ€‹

Similar Sections (Give Policies To)โ€‹

SectionSub SectionsInternal RulesPoliciesFlags
๐Ÿ’ผ NIST SP 800-53 Revision 5 โ†’ ๐Ÿ’ผ CA-9(1) Internal System Connections _ Compliance Checks15
๐Ÿ’ผ NIST SP 800-53 Revision 5 โ†’ ๐Ÿ’ผ CM-2 Baseline Configuration713

Sub Sectionsโ€‹

SectionSub SectionsInternal RulesPoliciesFlags