The information system prevents public access into the organization's internal networks except as appropriately mediated by managed interfaces employing boundary protection devices.