NIST SP 800-215 Guide to a Secure Enterprise Network Landscape 3.3: Use integrated appliance sets where single-console convergence fits the need

What does 3.3 require?

Where a converged device suits the environment the enterprise uses unified threat management (firewall, intrusion prevention, VPN concentration, gateway anti-malware, content filtering and WAN load balancing under one console), next-generation firewalls with application-layer awareness, TLS decryption and inspection and intrusion prevention (as an appliance, a cloud virtual machine or firewall as a service), web application and API protection for API security, bot defence and distributed denial of service protection, and secure web gateways that filter and inspect outbound web traffic from users anywhere, remembering that gateways do not replace web application firewalls protecting inbound traffic.