Australian Information Security Manual ISM-1030: A NIDS or NIPS is located immediately inside the outermost firewall for gateways and confi

A NIDS or NIPS is located immediately inside the outermost firewall for gateways and configured to generate event logs and alerts for network traffic that contravenes any rule in a firewall ruleset.

Other controls in Guidelines for networking

ISM-0385 Servers maintain effective functional separation with other servers allowing them to opera
ISM-0516 Network documentation includes high-level network diagrams showing all connections into ne
ISM-0518 Network documentation is developed, implemented and maintained.
ISM-0520 Network access controls are implemented on networks to prevent the connection of unauthori
ISM-0521 IPv6 functionality is disabled in dual-stack network devices unless it is being used.
ISM-0529 VLANs are not used to separate network traffic between networks belonging to different sec
ISM-0530 Network devices managing VLANs are administered from the most trusted security domain.
ISM-0534 Unused physical ports on network devices are disabled.

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Australian Information Security Manual controls