+SYS.4.4.A5 Restriction of Network Access (B)

SYS.4.4.A5 Restriction of Network Access (B)

The network access of IoT devices MUST be restricted to the required minimum. This SHOULD be monitored regularly. The following aspects should be taken into consideration in this regard:

  • For traffic control at network gateways (e.g. by means of rules on firewalls and access control lists (ACLs) on routers), the incoming and outgoing connections permitted MUST be defined in advance.
  • Routings on IoT devices and sensors SHOULD be configured restrictively, especially with regard to the suppression of default routes.
  • IoT devices and sensors SHOULD be operated in a separate network segment that is only allowed to communicate with the network segment for management.
  • Virtual private networks (VPNs) between networks with IoT devices, sensor networks, and management networks SHOULD be configured restrictively.
  • The UPnP feature MUST be disabled on all routers.

1. Přehled

1.1 Odkazy

1.2 Identifikované požadavky

1.3 Související regulace

2. Identifikované požadavky

Požadavky

3. Související regulace

Regulace

Propojené úkoly

Vazby
blocks G 0.14 Interception of Information / Espionage
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.20 Information or Products from an Unreliable Source
blocks G 0.21 Manipulation with Hardware or Software
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.25 Failure of Devices or Systems
blocks G 0.26 Malfunction of Devices or Systems
blocks G 0.28 Software Vulnerabilities or Errors
blocks G 0.29 Violations of Laws or Regulations
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.38 Misuse of Personal Information
blocks G 0.39 Malware
blocks G 0.40 Denial of Service