Summary

The organization must filter the content of websites accessed from a location belonging to the same entity (Output Proxy).

Description

This requirement allows organizations to manage and control internet usage, protect against threats, and ensure that employees adhere to security policies, contributing to a secure environment and enhancing the overall performance of the network.

Supported In

This requirement is verified in following services

References

• CIS-9_2. Use DNS filtering services
• MITRE ATT&CK®-M1021. Restrict web-based content
• MITRE ATT&CK®-M1037. Filter network traffic
• ISO/IEC 27002-8_22. Web filtering
• ISA/IEC 62443-RDF-5_2. Zone boundary protection
• ISA/IEC 62443-RDF-5_3. User content filtering
• OSSTMM3-11_3_1. Data networks security (active detection verification) - Filtering
• WASC-A_42. Abuse of functionality
• ISSAF-G_14. Network security - Firewalls (countermeasures)
• PTES-7_3_1_5. Post exploitation - Network infrastructure analysis (proxy servers)
• C2M2-9_2_g. Implement network protections for cybersecurity architecture
• SIG Core-N_1_3. Network security
• ISO/IEC 27001-8_22. Web filtering

Vulnerabilities

Free trial

Search for vulnerabilities in your apps for free with Fluid Attacks' automated security testing! Start your 21-day free trial and discover the benefits of the Continuous Hacking Essential plan. If you prefer the Advanced plan, which includes the expertise of Fluid Attacks' hacking team, fill out this contact form.