Cyber Essentials question · Firewalls & internet gateways
Are inbound services from the internet blocked unless there is a documented business need for them?
Why assessors ask this
Anything reachable from outside (databases, remote desktop, admin panels) should have a justified reason to be open.
What “good” looks like for Firewalls & internet gateways
- Turn on the built-in software firewall on every laptop and desktop, especially devices used away from the office.
- Change any default router/firewall admin passwords to strong, unique ones.
- Close inbound services you don't need; for anything that must stay open, write down why.
See where you stand in 5 minutes
Answer the Cyber Essentials questions in plain English and get a per-control readiness verdict — free, no login needed, and we don't store your answers.
Start the free readiness check →Part of the Firewalls & internet gateways control.
This is a free readiness / gap report to help you prepare — it is not a certification, and we are not an IASME Certification Body. To certify, you apply through an accredited Certification Body.