New Tests - March
This months implemented test:
Test requirements
- Can be done from a single computer
- We can expect to get similar results on similar systems in the organization.
- Does not need special software or hardware
Test connectivity out to other countries
CIS 12: Boundary Defense
From: Eion
Implemented in platform: 
Unfortunately most attacks come from a small set of countries, because of this we’ve started blocking entire IP blocks from the worst offenders (we use pfBlocker for this). In order to test that this control is implemented we do ongoing nmap of a random set of IPs within these blocks. You can get the IP blocks from: https://lite.ip2location.com/ip-address-ranges-by-country
Manual test:
# From a computer on the Internet:
# open a cmd prompt, then simply run:
nmap -Pn --top-ports 10 bad-IPs-list
# The test will output a grading on your SSL configuration.
Automated - Using our platform:
