Best Practice Detail

13-8-8090

Network Operators, Service Providers, and Equipment Suppliers should restrict dynamic port allocation protocols such as Remote Procedure Calls (RPC) and some classes of Voice-over-IP protocols (among others) from usage, especially on mission critical assets, to prevent host vulnerabilities to code execution. Dynamic port allocation protocols should not be exposed to the internet. If used, such protocols should be protected via a dynamic port knowledgeable filtering firewall or other similar network protection methodology.

Status: Rollover New

References/Comments: ITU-T Rec. X.815 (?? ISO/IEC 8073 ) Rec. ITU-T X.1031.

Historical events:

Network Operators
Service Providers
Equipment Suppliers
Internet/Data
Cyber Security
Network Elements
Network Operations
Intrusion Detection
CSRIC VII: Rollover New In CSRIC VII