Sunday, December 24, 2017

Firewall rules best pratice

Has anything changed with regard best pratice on what ports to enable on a firewall rule set? I have a rule set that permits destination HTTP(+UDP), HTTPS(+UDP), DNS(UDP), NTP(UDP),IMAP4S(TCP),Submission(TCP) and SMTPS(TCP). I'm seeing hits on the deny for really weird ports like 8545, 32414 etc. It's mostly mobile devices for apple and google play. I'm debating if I should keep it restricted or just open it up.



No comments:

Post a Comment