+NET.1.1.A5 Client-Server Segmentation (B)

NET.1.1.A5 Client-Server Segmentation (B)

Clients and servers MUST be placed in different network segments. The communication between these network segments MUST be controlled by a stateful packet filter at minimum.

It SHOULD be noted that possible exceptions which make it possible to position clients and servers in a shared network segment are covered in the respective application-specific and system-specific modules.

For guest access and network areas where there is no internal control of end devices, dedicated network segments MUST be established.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.22 Manipulation of Information
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems