Deployment Checklists

Use these checklists during deployment and periodic security reviews.

Quick Checklist (All Environments)

  • Implement a Stealth Rule for a Security Gateway (drop non-required traffic directed to the Security Gateway).

  • Review and (where needed) enable logging for Implied Rules.

  • Place Management Server in a protected segment behind a firewall.

  • Restrict admin access by source IP (jump hosts / admin networks only).

  • Enforce MFA for administrators via Identity Provider.

  • Remove / disable unused administrator accounts.

  • Apply latest recommended Hotfix / Jumbo Hotfix Accumulator Take and confirm update health.

  • Harden Gaia OS: password policy, SNMP, routing (only if needed), restrict Expert mode.

  • Use least privilege credentials for AD / Cloud / API integrations and maintain an inventory.