3.13.1 Protect Communication with Firewalls

3.13.1 Monitor, control, and protect communications (i.e. information transmitted or received by organizational systems) with Firewalls by creating external and key internal boundaries of organizational systems.

To go back to the NIST 800-171 Controls page, click here.

Guides

• NIST SP 800-41 – Guidelines on Firewalls and Firewall Policy
• Microsoft TechNet – Perimeter Firewall Design
• SANS Institute – Achieving Defense-in-Depth with Internal Firewalls
• Microsoft Technet – Firewalls

Example Tools

• Barracuda NextGen Firewalls
• Cisco Next-Generation Firewalls
• Check Point Next Generation Firewall
• Fortinet FortiGate Next Generation Firewalls

Sample Policy & Procedures

• Colorado Department of Education – Network Firewall Implementation Policy
• Texas Wesleyan University – Sample Firewall Policy

Additional Lessons Learned

• University System of Maryland – An Approach to Developing Your Firewall Security Policy

Videos

• Implementing A Firewall

Vendor Documentation

• Black Hat – Why do I need a Firewall?
• Cisco – Firewalls: Frequently Asked Questions