Cyber Essentials firewall evidence
Firewalls and routers are the first control area in Cyber Essentials. Your assessor needs to see that boundary devices are configured securely, default passwords are changed, and inbound services are restricted.
Why firewall evidence trips SMEs up
Boundary firewall evidence is usually scattered: a screenshot in someone's downloads folder, a router admin login no one has used in months, and a vague memory that ‘we changed the default password back in 2022’. Without dated, labelled evidence, your assessor has nothing concrete to look at.
Examples of firewall evidence
- Screenshots of firewall / router admin pages showing current configuration
- Confirmation that the default admin password has been changed
- List of inbound rules with business justification
- Evidence that unused services and ports are disabled
- Notes from the most recent configuration review
- Software firewall settings on user devices (Windows / macOS)
How Evaud helps
One place for boundary evidence
Tag uploads to the firewall control area so they can't be lost in a generic folder.
Review reminders
Set a review date on each firewall record so you re-check rules at least annually.
Assessor-ready view
Approved firewall evidence appears in the read-only assessor portal — no email attachments.
Frequently asked questions
Start building your Cyber Essentials evidence today.
Free to try. No credit card required.