5.7.3.1
Establish Basic Perimeter Defenses
Perimeter Firewall
Establish Basic Perimeter Defenses – Perimeter Firewall – The organization shall have a firewall placed between two perimeters that controls the amount and kinds of traffic that may pass between the two.
-
8.3 Information Access Restriction: Limit access to information and associated assets according to the established topic-specific access control policy.
8.6 Capacity Management: Monitor and adjust resource usage according to current and anticipated capacity needs.
8.12 Data Leakage Prevention: Apply data leakage prevention measures to systems, networks, and other devices handling sensitive information.
8.16 Monitoring Activities: Monitor networks, systems, and applications for unusual behavior and take appropriate actions to assess potential information security incidents.
8.20 Network Security: Secure, manage, and control networks and network devices to safeguard information in systems and applications.
8.21 Security of Network Services: Identify, implement, and monitor security mechanisms, service levels, and service requirements for network services.
8.23 Web Filtering: Manage access to external websites to minimize exposure to malicious content.
-
3.1.20 Verify and control/limit connections to and use of external systems.
3.3.5 Correlate audit record review, analysis, and reporting processes for investigation and response to indications of unlawful, unauthorized, suspicious, or unusual activity.
3.4.5 Define, document, approve, and enforce physical and logical access restrictions associated with changes to organizational systems.
3.4.8 Apply deny-by-exception (blacklisting) policy to prevent the use of unauthorized software or deny-all, permit-by-exception (whitelisting) policy to allow the execution of authorized software.
3.5.4 Employ replay-resistant authentication mechanisms for network access to privileged and nonprivileged accounts.
3.13.1 Monitor, control, and protect communications (i.e., information transmitted or received by organizational systems) at the external boundaries and key internal boundaries of organizational systems.
3.13.6 Deny network communications traffic by default and allow network communications traffic by exception (i.e., deny all, permit by exception).
3.14.6 Monitor organizational systems, including inbound and outbound communications traffic, to detect attacks and indicators of potential attacks.
-
3.1.20 Verify and control/limit connections to and use of external systems.
3.3.5 Correlate audit record review, analysis, and reporting processes for investigation and response to indications of unlawful, unauthorized, suspicious, or unusual activity.
3.4.5 Define, document, approve, and enforce physical and logical access restrictions associated with changes to organizational systems.
3.4.8 Apply deny-by-exception (blacklisting) policy to prevent the use of unauthorized software or deny-all, permit-by-exception (whitelisting) policy to allow the execution of authorized software.
3.5.4 Employ replay-resistant authentication mechanisms for network access to privileged and nonprivileged accounts.
3.13.1 Monitor, control, and protect communications (i.e., information transmitted or received by organizational systems) at the external boundaries and key internal boundaries of organizational systems.
3.13.6 Deny network communications traffic by default and allow network communications traffic by exception (i.e., deny all, permit by exception).
3.14.6 Monitor organizational systems, including inbound and outbound communications traffic, to detect attacks and indicators of potential attacks.