Skip to main content

💼 3 Networking

  • Contextual name: 💼 3 Networking
  • ID: /frameworks/cis-gcp-v2.0.0/03
  • Located in: 💼 CIS GCP v2.0.0

Description​

This section covers recommendations addressing networking on Google Cloud Platform.

Similar​

  • Internal
    • ID: dec-b-0e44c4be

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags
💼 3.1 Ensure That the Default Network Does Not Exist in a Project - Level 2 (Automated)
💼 3.2 Ensure Legacy Networks Do Not Exist for Older Projects - Level 1 (Automated)
💼 3.3 Ensure That DNSSEC Is Enabled for Cloud DNS - Level 1 (Automated)
💼 3.4 Ensure That RSASHA1 Is Not Used for the Key-Signing Key in Cloud DNS DNSSEC - Level 1 (Automated)
💼 3.5 Ensure That RSASHA1 Is Not Used for the Zone-Signing Key in Cloud DNS DNSSEC - Level 1 (Automated)
💼 3.6 Ensure That SSH Access Is Restricted From the Internet - Level 2 (Automated)
💼 3.7 Ensure That RDP Access Is Restricted From the Internet - Level 2 (Automated)
💼 3.8 Ensure that VPC Flow Logs is Enabled for Every Subnet in a VPC Network - Level 2 (Automated)
💼 3.9 Ensure No HTTPS or SSL Proxy Load Balancers Permit SSL Policies With Weak Cipher Suites - Level 1 (Manual)
💼 3.10 Use Identity Aware Proxy (IAP) to Ensure Only Traffic From Google IP Addresses are 'Allowed' - Level 2 (Manual)