+NET.3.2.A29 Use of High-Availability Solutions (H)

NET.3.2.A29 Use of High-Availability Solutions (H)

Packet filters and application level gateways SHOULD be designed to ensure high availability. Furthermore, there SHOULD be two independent options for accessing external networks (e.g. Internet access through two different providers). Internal and external routers and any other active components involved (e.g. switches) SHOULD also be designed to ensure high availability.

Even after an automatic failover, firewall structures SHOULD comply with the requirements of the security policy at hand (e.g. "fail safe" or "fail secure").

This function SHOULD be monitored on the basis of multiple parameters. Function monitoring SHOULD not be based on a single criterion. The log files and warnings of high-availability solutions SHOULD be checked at regular intervals.

1. Přehled

1.1 Odkazy

1.2 Identifikované požadavky

1.3 Související regulace

2. Identifikované požadavky

Požadavky

3. Související regulace

Regulace

Propojené úkoly

Vazby
blocks G 0.8 Failure or Disruption of the Power Supply
blocks G 0.9 Failure or Disruption of Communication Networks
blocks G 0.25 Failure of Devices or Systems