πΌ 3.7 Ensure That RDP Access Is Restricted From the Internet - Level 2 (Automated)
- Contextual name: πΌ 3.7 Ensure That RDP Access Is Restricted From the Internet - Level 2 (Automated)
- ID:
/frameworks/cis-gcp-v3.0.0/03/07
- Located in: πΌ 3 Networking
Descriptionβ
GCP Firewall Rules
are specific to a VPC Network
. Each rule either allows
or denies
traffic when its conditions are met. Its conditions allow users to specify the type of traffic, such as ports and protocols, and the source or destination of the traffic, including IP addresses, subnets, and instances.
Firewall rules are defined at the VPC network level and are specific to the network in which they are defined. The rules themselves cannot be shared among networks. Firewall rules only support IPv4 traffic. When specifying a source for an ingress rule or a destination for an egress rule by address, an IPv4
address or IPv4 block in CIDR
notation can be used. Generic (0.0.0.0/0)
incoming traffic from the Internet to a VPC or VM instance using RDP
on Port 3389
can be avoided.
Similarβ
- Internal
- ID:
dec-c-ea9e6b18
- ID:
Sub Sectionsβ
Section | Sub Sections | Internal Rules | Policies | Flags |
---|
Policies (1)β
Policy | Logic Count | Flags |
---|---|---|
π Google GCE Network has Firewall Rules which allow unrestricted RDP access from the Internet π’ | 1 | π’ x6 |