IT-04:NET-02
§6 Firewalls restrict inbound/outbound traffic; only approved ports permitted
Collectors
| Collector | Relationship | Samples | What it observes |
|---|---|---|---|
| probes.external_ports | satisfies | monthly | Proves only the UFW-permitted ports answer from the public internet |
| probes.ssh_posture | supports | monthly | Proves remote production access is SSH-2 only, with no unencrypted alternative |
| scans.external | supports | monthly | Monthly unauthenticated scan of everything we expose to the internet |
Evidence satisfying this control
| Collected | Collector | Result | Source | Digest |
|---|---|---|---|---|
| No artifact satisfies this control. | ||||