The network team has well-established procedures to follow for creating new rules on the firewall. This includes having approval from a manager prior to implementing any new rules. While reviewing…

Documenting the reason after the fact does not address the immediate security risk or the procedural violation of implementing the rule without prior approval.

Monitoring traffic using an unapproved firewall rule still means the organization is operating under a potentially unauthorized and insecure configuration, which should not be permitted.

Relying on an unapproved rule for business operations ignores the fundamental security principle of change management and approval, potentially exposing the organization to unknown risks.

Immediately rolling back the firewall rule is the appropriate action because the rule was implemented in direct violation of established security procedures requiring manager approval. Allowing an unapproved rule to persist introduces an unvetted security risk and undermines the control framework.