3.5.4
3.5.4
Employ replay-resistant authentication mechanisms for network access to privileged and nonprivileged accounts.
-
5.7.3.1 The organization shall have a firewall placed between two perimeters that controls the amount and kinds of traffic that may pass between the two.
5.7.3.3 The organization shall activate any software firewalls included on devices within their networks or document the alternative measures in place instead of these firewalls.