+NET.1.1.A10 DMZ Segmentation for Access from the Internet (B)

NET.1.1.A10 DMZ Segmentation for Access from the Internet (B)

An organisation's firewall structure MUST be complemented by an external DMZ for all services and applications that can be accessed from the Internet. A concept for DMZ segmentation SHOULD be drawn up that implements the corresponding security policy and requirements specification in a transparent manner. Depending on the security level of the IT systems at hand, the DMZ segments MUST be divided further. An external DMZ MUST be connected to the external packet filter.

1. Prehľad

1.1 Odkazy

1.2 Identifikované požiadavky

1.3 Súvisiace predpisy

2. Identifikované požiadavky

Požiadavky

3. Súvisiace predpisy

Predpisy

Prepojené úlohy

Prepojenia
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.22 Manipulation of Information
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems