Minimizing the Exposure of Systems to External Networks

Install and configure Gateway firewall 

 Configure Inbound and outbound ACL (Access Control List) to control only required and legitimate traffic only to be allowed to go In and Out of the network. 

 Close all the ports and only open the required port 

 Avoid "any'"'any" rules set up in all the configurations 

 All rules must be configured to ensure no 'unwanted services' or 'hosts' are exposed to the internet 

 Implement network segregation by having DMZ for public facing servers, Server Zone and User zone 

 Ensure that the network is secure by Segregating different administrative duties 

 All remote access to core ICT infrastructure should be done via VPN