+NET.1.1.A10 DMZ Segmentation for Access from the Internet (B)

NET.1.1.A10 DMZ Segmentation for Access from the Internet (B)

An organisation's firewall structure MUST be complemented by an external DMZ for all services and applications that can be accessed from the Internet. A concept for DMZ segmentation SHOULD be drawn up that implements the corresponding security policy and requirements specification in a transparent manner. Depending on the security level of the IT systems at hand, the DMZ segments MUST be divided further. An external DMZ MUST be connected to the external packet filter.

1. Επισκόπηση

1.1 Παραπομπές

1.2 Εντοπισμένες απαιτήσεις

1.3 Σχετικοί κανονισμοί

2. Εντοπισμένες απαιτήσεις

Απαιτήσεις

3. Σχετικοί κανονισμοί

Κανονισμοί

Συνδεδεμένα ζητήματα

Συνδέσεις
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.22 Manipulation of Information
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems