NIST SP 800-171 REV. 3 03.13.06 Network Communications – Deny by Default – Allow by Exception

Requirement

Deny network communications traffic by default, and allow network communications traffic by exception.

Explanation

This requirement applies to inbound and outbound network communications traffic at the system boundary and at identified points within the system. A deny-all, allow- by-exception network communications traffic policy ensures that only essential and approved connections are allowed.

Need help putting this into practice? See our NIST SP 800-171 & CMMC compliance services or read our NIST SP 800-171 & CMMC articles.

See LakeRidge in action.

Talk with our team about your framework, your gaps, and the right plan.

Get a demo