NIST SP 800-215 Guide to a Secure Enterprise Network...

What does HAE-NCF-3 require?

Devices are authenticated through certificate validation using appropriate protocols, and a device health check covers both the security posture (operating system version, patches applied, security software installed) together with environmental facts such as where the device is.

Other controls in Section 4: Network configurations for basic security functions – NIST SP 800-215 Guide to a Secure Enterprise Network Landscape

4.1 Verify identity with phishing-resistant multi-factor authentication and decide access on risk-based contextual information
HAE-NCF-1 Manage and secure every endpoint through unified endpoint management
HAE-NCF-2 Route all user access through an enterprise-managed identity provider with phishing-resistant multi-factor authentication
HAE-NCF-4 Issue access tokens to validated users, devices and services through standard protocols
HAE-NCF-5 Give microservices networks service discovery, encryption, authentication, load balancing, observability and canary rollouts

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All NIST SP 800-215 Guide to a Secure Enterprise Network Landscape controls