Skip to content

Firewall

What is Firewall?

A network security device or software that monitors and controls incoming and outgoing network traffic based on predetermined security rules. Firewalls establish a barrier between trusted internal networks and untrusted external networks.

Information Security

Terms that appear alongside firewall

Each of these is named in at least one of the same controls as firewall. The number is how many controls name both.

Frameworks that govern firewall

NIST SP 800-53 Rev 5View framework →CIS Controls v8View framework →

What the standards actually require on firewall

Requirements naming firewall across 6 standards, quoted from the control text.

UK Cyber Essentials10 controls

Where devices are used on untrusted networks (home, public Wi-Fi), the host-based software firewall must be enabled and configured.

CE-FW.6 · Host-Based Firewall for Remote Workers →
Australian Information Security Manual5 controls

Evaluated firewalls are used between networks belonging to different security domains.

ISM-0639 · Evaluated firewalls are used between networks belonging to different security domains. →
Azure Security Benchmark4 controls

Deploy Azure Firewall or third party NVA at the edge to inspect and control inbound and outbound traffic with documented rules.

NS-3 · Deploy firewall at the edge of enterprise network →
CIS Controls v83 controls

Implement and manage a firewall on servers, where supported. Example implementations include a virtual firewall, operating system firewall, or a third-party firewall agent.

CIS-4.4 · Implement and Manage a Firewall on Servers →
ASD Strategies to Mitigate Cyber Security Incidents2 controls

Software-based application firewall, blocking incoming network traffic that is malicious or unauthorised.

ASD37-25 · Software firewall - inbound (Very Good) →
Cyber Essentials Plus2 controls

End user devices and servers must have host based firewalls enabled and configured to block unsolicited inbound connections by default.

CEP-FW-02 · Host Based Firewall on Devices →

Questions people ask about firewall

What is Firewall?
A network security device or software that monitors and controls incoming and outgoing network traffic based on predetermined security rules. Firewalls establish a barrier between trusted internal networks and untrusted external networks.
Why is Firewall important for compliance?
Firewall is a key concept in Information Security. Understanding firewall helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address Firewall?
Firewall appears in the requirement text of UK Cyber Essentials, Australian Information Security Manual, Azure Security Benchmark, CIS Controls v8, ASD Strategies to Mitigate Cyber Security Incidents. Across these standards we have identified 26 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Firewall?
Explore our compliance framework pages to see how firewall applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Firewall applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.