I'm doing some research on checklist, benchmark, hardening guidelines. And I couldn't find specific documents for security checklist for firewall.

CIS had this document, but it was only for Cisco firewall, and also one for Checkpoint firewall.

And I found another one from NIST, named "Guidelines on Firewalls, policy", which was for configuration.

SANS got this nice document of Firewall Checklist, but I'm afraid it's too old, as all the info's are from 2000-2001. Are there any checklist, benchmarking kind of "standard", guide, material?

  • 1
    The problem with the SANS list isn't so much that it's outdated as that it comes from a "default permit" mindset rather than a "default deny" mindset.
    – Mark
    Commented Jan 8, 2015 at 4:54
  • Firewalls vary greatly in function and technology. It might not be possible to have a general hardening guide, except to ensure appropriate user access and access to config UI.
    – schroeder
    Commented Jan 12, 2015 at 20:39

1 Answer 1


Here's a good one on filtering your egress traffic.

And here's a whitepaper put out by a firewall provider (they start the sales pitch on page 6, but the rest before it is solid advice).

This is Microsoft's take on the matter.

This is a document written by Kevin Beaver, an infosec professional.

Cover all the bases? :)

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .