NIST SP 800-171
NIST SP 800-171: Configuration Management

NIST SP 800-171 SP800-171-3.13.6: Deny network traffic by default

Deny network communications traffic by default and allow network communications traffic by exception (deny all, permit by exception).

Other controls in NIST SP 800-171: Configuration Management

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.