Do you think that there should be a common desktop firewall policy? If so, what should it be? Should a policy incorporate a port-based firewall that blocks all inbound ports?
Yes, organizations should definitely have a standard desktop
policy. A good starting point is to employ the "Deny all" setting. The Windows Firewall equivalent is "Don't allow exceptions". Unless there are services on the desktop that must be accessed by other systems, there is no need to have any ports open on the standard productivity workstation. And, if you do have these services (remote administration tools, for example), allow only the bare minimum number of ports and expose them to the smallest possible subnet.
Visit our Firewall Learning Guide.
Find out who should manage the firewall.
By submitting your personal information, you agree that TechTarget and its partners may contact you regarding relevant content, products and special offers.
Dig Deeper on Network device security: Appliances, firewalls and switches
It's not possible to eradicate the risk of DoS attacks, but there are steps infosec pros can take to reduce their impact. Mike Chapple shares ...continue reading
The HHS OCR ruled that healthcare ransomware attacks are HIPAA violations, so these covered entities need to react according to the HHS's guidance. ...continue reading
HIPAA regulations incorporate NIST guidelines and standards, so do healthcare organizations need to be compliant with both? Expert Mike Chapple ...continue reading
Have a question for an expert?
Please add a title for your question
Get answers from a TechTarget expert on whatever's puzzling you.