Skip to content

Firewall

What is Firewall?

A network security device or software that monitors and controls incoming and outgoing network traffic based on predetermined security rules. Firewalls establish a barrier between trusted internal networks and untrusted external networks.

Information Security

Each of these is named in at least one of the same controls as firewall. The number is how many controls name both.

What the standards actually require on firewall

Requirements naming firewall across 6 standards, quoted from the control text.

Where devices are used on untrusted networks (home, public Wi-Fi), the host-based software firewall must be enabled and configured.

CE-FW.6 · Host-Based Firewall for Remote Workers →

Evaluated firewalls are used between networks belonging to different security domains.

ISM-0639 · Evaluated firewalls between security domains →

A personal firewall that manages program access to the internet, blocks unsolicited connection requests, filters incoming traffic by address, protocol and destination port and keeps an IP traffic log is employed on every mobile device with a full-feature opera...

fbi-cjis-security-policy::5.20.4.3 · 5.20.4.3 Personal Firewall →

Where the regulator requires, firewall rules are periodically reviewed on all perimeter and internal firewalls to verify operating condition and the effectiveness of the security configuration and rule sets.

gli-33-gaming-laboratories-international-event-wagering-systems::B.7.6 · B.7.6 Firewall Rules Review →

Deploy Azure Firewall or third party NVA at the edge to inspect and control inbound and outbound traffic with documented rules.

NS-3 · Deploy firewall at the edge of enterprise network →

Questions people ask about firewall

What is Firewall?
A network security device or software that monitors and controls incoming and outgoing network traffic based on predetermined security rules. Firewalls establish a barrier between trusted internal networks and untrusted external networks.
Why is Firewall important for compliance?
Firewall is a key concept in Information Security. Understanding firewall helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Firewall?
Firewall appears in the requirement text of New Zealand Information Security Manual (NZISM), UK Cyber Essentials, Australian Information Security Manual, FBI CJIS Security Policy, GLI-33 - Gaming Laboratories International Event Wagering Systems. Across these standards we have identified 51 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Firewall?
Explore our compliance framework pages to see how firewall applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Firewall applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.