3.13.5 Implement sub-networks for publicly accessible system components that are physically or logically separated from internal networks.
To go back to the NIST 800-171 Controls page, click here.
Guides
- SANS Institute – Designing a DMZ
- NIST SP 800-41 – Guidelines on Firewalls and Firewall Policy
- Microsoft TechNet – Perimeter Firewall Design
Example Tools
- Barracuda NextGen Firewalls
- Cisco Next-Generation Firewalls
- Check Point Next Generation Firewall
- Fortinet FortiGate Next Generation Firewalls