+NET.1.1.A11 Protection of Communications Entering the Internal Network from the Internet (B)

NET.1.1.A11 Protection of Communications Entering the Internal Network from the Internet (B)

IP-based access to an internal network MUST run through a secure communication channel. Access MUST be restricted to trusted IT systems and users (see NET.3.3 VPN). VPN gateways of this kind SHOULD be placed in an external DMZ. It SHOULD be ensured that adequately hardened VPN gateways can be accessed directly from the Internet. Access attempts to an internal network that are authenticated via a VPN gateway MUST at least pass through an internal firewall.

IT systems MUST NOT access an internal network via the Internet or an external DMZ. It SHOULD be ensured that any exceptions to this requirement are covered in the relevant application- and system-specific modules.

1. Vue d’ensemble

1.1 Références

1.2 Exigences identifiées

1.3 Réglementations associées

2. Exigences identifiées

Exigences

3. Réglementations associées

Réglementations

Tickets liés

Liens
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.22 Manipulation of Information
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.29 Violations of Laws or Regulations
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.40 Denial of Service
blocks G 0.43 Attack with Specially Crafted Messages