Performance Based Question 02

Scenario:

You are a network security engineer for a medium-sized business. The company is concerned about data transmission into and out of the corporate network. In particular, they are concerned that the perimeter firewall rules are overly permissive. You have been granted access to the firewall control panel and Access Control List (ACL). Inspect the current configuration and then answer questions below to make the appropriate recommendations.

Please carefully note the company has the following specific requirements for their upcoming PCI DSS audit:

• RDP traffic should never be allowed.
• SSH is generally allowed and encouraged as a remote administration method.
• The company operates a public-facing web server and needs to permit HTTP and HTTPS traffic but only towards its webserver. The load balancer for the webserver cluster is hosted on internal IP address 10.1.2.80.
• The company has concerns that some of its staff are operating FTP or SMB fileshares without permission (Shadow IT). Rules should be in place to handle this.