STIGhubSTIGhub
STIGsRMF ControlsCompare
STIGhub— A free STIG search and compliance tool·STIGs updated 3 days ago
Powered by Pylon·Privacy·Terms·© 2026 Beacon Cloud Solutions, Inc.
← All Controls

SC-7 (8)

System and Communications ProtectionRev 5system

Boundary Protection

Baselines:ModerateHigh

Control Statement

Route [Assignment: internal communications traffic] to [Assignment: external networks] through authenticated proxy servers at managed interfaces.

Supplemental Guidance

External networks are networks outside of organizational control. A proxy server is a server (i.e., system or application) that acts as an intermediary for clients requesting system resources from non-organizational or other organizational servers. System resources that may be requested include files, connections, web pages, or services. Client requests established through a connection to a proxy server are assessed to manage complexity and provide additional protection by limiting direct connectivity. Web content filtering devices are one of the most common proxy servers that provide access to the Internet. Proxy servers can support the logging of Transmission Control Protocol sessions and the blocking of specific Uniform Resource Locators, Internet Protocol addresses, and domain names. Web proxies can be configured with organization-defined lists of authorized and unauthorized websites. Note that proxy servers may inhibit the use of virtual private networks (VPNs) and create the potential for "man-in-the-middle" attacks (depending on the implementation).

Related Controls (1)

AC-3

CCI Identifiers (3)

CCI-001112Route organization-defined internal communications traffic to organization-defined external networks through authenticated proxy servers at managed interfaces.CCI-001113Defines the internal communications traffic to be routed to external networks.CCI-001114Defines the external networks to which organization-defined internal communications traffic should be routed.

Linked STIG Checks (3)

Across 1 STIGs. Click to expand.