All Ports Should Not Be Open To Public
More Info:
Determines if all ports are open to the public.Risk Level
CriticalAddress
SecurityCompliance Standards
SOC2, NIST, PCIDSS, GDPRTriage and Remediation
Remediation
Using Console
Using Console
To remediate the misconfiguration of having all ports open to the public in GCP, you can follow the below steps using the GCP console:
- Open the Google Cloud Platform (GCP) Console and navigate to the project where the misconfiguration exists.
- In the left-hand menu, click on “Compute Engine” and then click on “VM instances”.
- Select the instance that needs to be remediated.
- Click on the “Edit” button at the top of the page.
- Scroll down to the “Firewall” section and click on “Networking”.
- In the “Firewall rules” section, click on “default-allow-ssh”.
- In the “Protocols and ports” section, select “Specified protocols and ports” and enter “tcp:22” in the text box.
- Click on “Save” to save the changes.
Using CLI
Using CLI
To remediate the misconfiguration “All Ports Should Not Be Open To Public” in GCP using GCP CLI, follow these steps:
-
First, identify the project and the VM instance that has all ports open to the public. You can use the following command to list all the VM instances in the project:
-
Once you have identified the VM instance, you can update its firewall rules to restrict access to only the required ports. You can use the following command to list all the firewall rules in the project:
-
Identify the firewall rule that allows all ports to be open to the public. You can use the following command to describe the firewall rule:
-
Update the firewall rule to allow access only to the required ports. You can use the following command to update the firewall rule:
Replace
[FIREWALL_RULE_NAME]with the name of the firewall rule that you want to update and[PORTS_TO_ALLOW]with the list of ports that you want to allow access to. For example, if you want to allow access only to ports 80 and 443, you can use the following command: -
Verify that the firewall rule has been updated by listing all the firewall rules again:
Ensure that the firewall rule that you updated has the correct ports allowed.
Using Python
Using Python
To remediate the misconfiguration “All Ports Should Not Be Open To Public” in GCP using Python, you can follow the below steps:Note: This code is just a sample and may need to be modified based on your specific requirements.
- First, you need to identify the VM instances that have all ports open to public. You can use the GCP Python SDK to list all VM instances and their firewall rules.
- Once you have identified the VM instances with the misconfiguration, you can use the GCP Python SDK to update the firewall rules and restrict the open ports. You can create a new firewall rule to allow only the required ports and protocols and delete the existing firewall rule that allows all ports.