Firewall rules should prohibit ingress from 0.0.0.0/0 to Telnet port 23
Firewall rules provide stateful filtering of ingress/egress network traffic to GCP resources. This control covers GCP Compute Engine firewall rules and expects them to prohibit ingress from `0.0.0.0/0` to the `Telnet` port `23`.
Firewall rules provide stateful filtering of ingress/egress network traffic to GCP resources.
What this control checks
Firewall rules should prohibit ingress from 0.0.0.0/0 to Telnet port 23
Audit evidence
Evidence that deployed resources meet this control: PowerPipe control gcp_compliance.control.compute_firewall_rule_ingress_access_restricted_to_telnet_port_23.
Framework-specific interpretation
NIST Cybersecurity Framework v2.0: Mapped to PR.IR-01 (Networks and environments are protected from unauthorized logical access and usage.).
Framework mappings
The clauses this control is mapped to in each framework.
- Restrict inbound and outbound traffic to that which is necessary for the cardholder data environment, and specifically deny all other traffic
Related controls
- Firewall rules should prohibit ingress from 0.0.0.0/0 to DNS port 53
- Firewall rules should prohibit ingress from 0.0.0.0/0 to TCP or UDP port 389
- Firewall rules should prohibit ingress from 0.0.0.0/0 to TCP port 8888
- Firewall rules without specific targets should prohibit ingress from 0.0.0.0/0 to any port
- Default firewall rules should prohibit ingress from 0.0.0.0/0 except HTTP and HTTPS
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
compute_firewall_rule_ingress_access_restricted_to_telnet_port_23 - Powerpipe Control:
gcp_compliance.control.compute_firewall_rule_ingress_access_restricted_to_telnet_port_23
Last reviewed: 2026-10-09