Detections
Analytics
CSCv6|12.5
Title
Design and implement network perimeters so that all outgoing network traffic to the Internet must pass through at least one application layer filtering proxy server.Description
Design and implement network perimeters so that all outgoing network traffic to the Internet must pass through at least one application layer filtering proxy server. The proxy should support decrypting network traffic, logging individual TCP sessions, blocking specific URLs, domain names, and IP addresses to implement a black list, and applying whitelists of allowed sites that can be accessed through the proxy while blocking all other sites. Organizations should force outbound traffic to the Internet through an authenticated proxy server on the enterprise perimeter.Reference Item Details
Reference: CIS Critical Security Controls v6
Category: Boundary Defense
Family: Network
Audit Items
View all Reference Audit Items