NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security
Section 3: Remote access solution security – NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security

NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security 3.3.2: Use device health checks and network access control where feasible, without relying on them

What does 3.3.2 require?

After the user is authenticated, the organisation may check the client device (operating system version, patch level, anti-malware status) and use the result to decide whether the device may connect and at what access level. Network access control is used whenever feasible to catch major policy violations and stop teleworkers using the wrong device, but because many health checks can be defeated by malware it is not relied on to stop determined attackers.

Maintained by Gerard Blokdyk

Other controls in Section 3: Remote access solution security – NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NIST SP 800-46 Rev 2 Enterprise Telework, Remote Access and BYOD Security controls