ANSSI Guide d'hygiene informatique (42 mesures, v2.0)
ANSSI Hygiene IV: Secure Workstations (measures 14 to 18)

ANSSI Guide d'hygiene informatique (42 mesures, v2.0) ANSSI-HYG-17: Enable and Configure the Local Firewall on Workstations

Enable and configure the local firewall on workstations so that unnecessary inbound connections are blocked.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

What else in your programme already covers this

This control maps to 33 controls across 17 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

  • ASBv3-GS-9 Define and implement endpoint security strategy
  • NS-1 Establish network segmentation boundaries
  • NS-3 Deploy firewall at the edge of enterprise network

CMMC 2.0 · 3 controls

PCI DSS 4.0 · 3 controls

  • 1.3.1 1.3.1 Inbound CDE traffic restricted
  • 1.4.2 1.4.2 Restricting traffic entering trusted networks from outside
  • 1.5.1 1.5.1 Security controls on dual-connected devices
  • ASD37-25 Software firewall - inbound (Very Good)
  • ASD37-26 Software firewall - outbound (Very Good)

FedRAMP High · 2 controls

  • SC-7 Boundary Protection
  • SC-7(12) Boundary Protection | Host-based Protection (SC-7(12))

FedRAMP Moderate · 2 controls

  • SC-7 Boundary Protection
  • SC-7(12) Boundary Protection | Host-based Protection (SC-7(12))

ISO 27001:2022 · 2 controls

  • 8.1 User end point devices
  • 8.20 Networks security

ISO 27002:2022 · 2 controls

  • 8.1 User endpoint devices
  • 8.20 Networks security
  • NIST-CSF-PR.IR-01 Networks and environments are protected from unauthorized logical access and usage
  • NIST-CSF-PR.PS-01 Configuration management practices are established and applied

NIST SP 800-171 Rev 3 · 2 controls

  • 03.13.01 Boundary Protection
  • 03.13.06 Network Communications - Deny by Default - Allow by Exception

NIST SP 800-53 Rev 5 · 2 controls

UK Cyber Essentials · 2 controls

  • SEC05-BP02 Control traffic flow within your network layers

CIS Controls v8 · 1 control

  • CIS-4.5 Implement and Manage a Firewall on End-User Devices

SOC 2 · 1 control

  • SOC2-CC6.6 CC6.6 Protection against threats from outside the system boundary

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in ANSSI Hygiene IV: Secure Workstations (measures 14 to 18)

You are reading one control. How much of ANSSI Guide d'hygiene informatique (42 mesures, v2.0) have you already done?

ANSSI Guide d'hygiene informatique (42 mesures, v2.0) ANSSI-HYG-17 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of ANSSI Guide d'hygiene informatique (42 mesures, v2.0) your existing evidence covers. Hold FedRAMP Moderate and 35 of 42 ANSSI Guide d'hygiene informatique (42 mesures, v2.0) controls already carry evidence.

Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 0 were rejected on the FedRAMP Moderate pair alone.

Query this from an agent

The graph holds this control, the 33 it maps to, and the evidence behind each claim, over MCP and REST.