One thing that is often neglected is getting rid of rules that are no longer needed. Maybe that server has been decommissioned? Maybe the relationship with that company has been terminated? Even if the answer is “Yes”, it’s quite likely that the old firewall rules are still there, because no one asked to remove them.

The post Firewall Rule Recertification: Goals, Challenges, and Tips appeared first on algosec.