Details

Disables the unused interfaces

Rationale:

Shutting down the unused interfaces is a complement to physical security. In fact, an attacker connecting physically to an unused port of the security appliance can use the interface to gain access to the device if the relevant interface has not been disabled and the source restriction to management access is not enabled.

Solution

Configure physical interfaces, subinterfaces, and Bridge Virtual Interfaces on the Firepower Management Center:
Devices > Device Management > Interfaces page. You can then configure additional options using FlexConfig.

Supportive Information

The following resource is also helpful.

• https://www.cisco.com/c/en/us/td/docs/security/firepower/640/hardening/ftd/FTD_Hardening_Guide_v64.html

This security hardening control applies to the following category of controls within NIST 800-53: Access Control.This control applies to the following type of system Cisco_Firepower.

References

• 800-53|AC-4(21)

Source

• Tenable.com/audits