Top 12 Tips to Enforce Firewall & Proxy Internal Controls>
Security HQ – Deodatta Wandhekar, Eleanor Barlow
1) Restrict Misuse of Powerful MS Signed Utilities 2) Disable Cached Credentials 3) Patching / Updating Applications 4) Block Remote Use of Local Accounts 5) Strictly No Default Accounts Across Entire Estate 6) No Service Accounts Should be Allowed Interactive Logons 7) Prepare for the Worst â Backups are Extremely Important 8) User Roles and Network Segregation 9) Define Every Single Expected Traffic Flow (Inbound and Outbound) 10) Disable Anonymous Logons 11) Disable SMBv1 12) Disable all Unrequired Services, Especially on Servers
Link: https://www.securityhq.com/blog/top-12-tips-to-enforce-firewall-proxy-internal-controls/