Gateway
What is Gateway?
A network point that serves as an entrance to another network, often implementing security controls such as firewalls and proxy services.
Terms that appear alongside gateway
Each of these is named in at least one of the same controls as gateway. The number is how many controls name both.
- firewall 9 shared controls
- authentication 8 shared controls
- zero trust 7 shared controls
- access control 7 shared controls
- policy 6 shared controls
- api security 6 shared controls
- owasp 6 shared controls
- nist 5 shared controls
Frameworks that govern gateway
What the standards actually require on gateway
Requirements naming gateway across 6 standards, quoted from the control text.
Every gateway, whether in a physical or a virtual environment, must include a firewall.
new-zealand-information-security-manual-nzism::19.3.8.C.01 · 19.3.8.C.01 Every gateway includes a firewall →Gateways inspect and filter data flows at the transport and above network layers.
ISM-1192 · Transport and application layer gateway inspection →Where an API gateway is used as the single entry point to a microservices application or as a front-end-to-backend connector during migration from legacy software, management routes all client requests through the gateway to the correct downstream services, mi...
ffiec-it-examination-handbook::DAM-IV.I.1 · IV.I.1 API Gateway (Development, Acquisition, and Maintenance) →Splits the policy enforcement point between a device-installed agent and a resource-side gateway that connect only after the policy administrator approves the session.
SP800-207-DEP-AGENT · Device Agent/Gateway-Based Deployment →Requirement 0114 (Part Four: Technology, section 15.3 Cyber Security Programs; applies to All entities; dated 01 July 2026; modified in Release 2026): Gateway capabilities that have completed an IRAP assessment (or ASD assessment for TOP SECRET gateways) again...
protective-security-policy-framework-pspf-release-2026::0114 · 0114 Use gateways with an IRAP (or ASD) assessment in the last 24 months →Article 25 establishes the Safety Gate Rapid Alert System (the successor to RAPEX) operated by the Commission as a network for the rapid exchange of information between Member State market surveillance authorities + the Commission + the EEA EFTA states on dang...
GPSR-Art.25_26_27 · Safety Gate Rapid Alert System, Safety Business Gateway and dangerous-product notification (Articles 25-27) →Questions people ask about gateway
What is Gateway?
Why is Gateway important for compliance?
Which compliance frameworks address Gateway?
Where can I learn more about Gateway?
See how Gateway applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.