NIST SP 800-215 Guide to a Secure Enterprise Network Landscape

Section 3: Network security appliances and automation tools – NIST SP 800-215 Guide to a Secure Enterprise Network Landscape

NIST SP 800-215 Guide to a Secure Enterprise Network Landscape NSAT-HLM-3: Automation tools provide advanced threat intelligence, real-time prevention and sandboxing

What does NSAT-HLM-3 require?

The tools carry advanced threat intelligence, real-time prevention of known and zero-day vulnerability exploitation, and sandboxing to isolate malicious traffic.

Maintained by Gerard Blokdyk

Other controls in Section 3: Network security appliances and automation tools – NIST SP 800-215 Guide to a Secure Enterprise Network Landscape

3.1 Broker cloud access to find shadow IT and enforce data, threat and configuration policy in the clouds used
3.2 Deploy firewalls with the feature set the landscape needs, at the edge, inside the data centre and on devices
3.3 Use integrated appliance sets where single-console convergence fits the need
3.4.1 Monitor the whole network for visibility, configuration drift and incident response feeds
3.4.2 Provision network infrastructure as code through audited pipelines, test it and correct drift
NSAT-HLM-1 Automation tools scale to DevSecOps volume and integrate into CI/CD pipelines
NSAT-HLM-2 Automation tools minimise human intervention in security remediation
NSAT-HLM-4 Automation tools match current events to past ones and reuse their remediation

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All NIST SP 800-215 Guide to a Secure Enterprise Network Landscape controls