Ensure Deny access to unused accounts is selected
Details Deny access to unused accounts. If there has been no successful login attempt in a set period of time,...
- Home
- Security Hardening
- CIS Check Point Firewall L1 V1.1.0
CIS Check Point Firewall L1 V1.1.0
Ensure DHCP is disabled
Details Disable the Dynamic Host Configuration Protocol (DHCP) server on your device. Rationale: The DHCP server supplies automatic configuration parameters,...Ensure Disallow Palindromes is selected
Details A palindrome is a sequence of letters, numbers, or characters that can be read the same in each direction....Ensure DNS server is configured – tertiary
Details Gaia uses the Domain Name Service (DNS) to translate host names into IP addresses. To enable DNS lookups, you...Ensure DNS server is configured – primary
Details Gaia uses the Domain Name Service (DNS) to translate host names into IP addresses. To enable DNS lookups, you...Ensure DNS server is configured – secondary
Details Gaia uses the Domain Name Service (DNS) to translate host names into IP addresses. To enable DNS lookups, you...Ensure Force users to change password at first login after password was changed from Users page is selected
Details Force users to change password at first login after their password was changed using the command set user password...Ensure Host Name is set
Details Changes the device default hostname. Rationale: The device hostname plays an important role in asset inventory and identification as...Ensure IPv6 is disabled if not used
Details Although IPv6 has many advantages over IPv4, not all organizations have IPv6 or dual stack configurations implemented Rationale: If...Ensure Lockout users after password expiration is set to 1
Details Lockout users after password expiration. After a user’s password has expired, they have this number of days to log...