OpenControls Logo

STIG Viewer

NIST 800-53 Rev 5

424 controls available

My Controls0NIST 800-53 Catalog424Collections0
SC-7(3)moderatehigh

Access Points

System and Communications Protection

Control Statement

Limit the number of external network connections to the system.

Discussion

Limiting the number of external network connections facilitates monitoring of inbound and outbound communications traffic. The Trusted Internet Connection [DHS TIC](#4f42ee6e-86cc-403b-a51f-76c2b4f81b54) initiative is an example of a federal guideline that requires limits on the number of external network connections. Limiting the number of external network connections to the system is important during transition periods from older to newer technologies (e.g., transitioning from IPv4 to IPv6 network protocols). Such transitions may require implementing the older and newer technologies simultaneously during the transition period and thus increase the number of access points to the system.

Framework
NIST SP 800-53 Rev 5
Family
System and Communications Protection
Baselines
moderate, high

Related Frameworks

3 paths across 2 frameworks
SCF1 mapping
NET-03.1Limit Network Connections
1.00
  • Secure Controls Framework · 2026.2 · scf_strm · equivalent
CCI2 mappings
CCI-001101
1.00
  • DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-004982
0.50
  • Secure Controls Framework · 2026.2 · scf_strm · equivalent
  • Secure Controls Framework · 2026.2 · scf_strm · related
  • DISA · 2025-01-23 · disa_cci_list · equivalent

Related STIGs

88 STIGs reach this control through 70 CCIs. Expand a row to see the responsible NICE and O*NET roles.

Operating System - Server

1 STIG
Microsoft Windows Server 2025 Security Technical Implementation Guide
V1R12026-02-201 of 284 findings match

Network Device

63 STIGs
Router Security Requirements Guide
52024-05-2835 of 108 findings match
Router Security Requirements Guide
V5R22025-09-1035 of 123 findings match
Cisco IOS XR Router RTR Security Technical Implementation Guide
32024-08-2232 of 96 findings match
Cisco IOS XR Router RTR Security Technical Implementation Guide
V3R32025-08-1932 of 96 findings match
Juniper EX Series Switches Router Security Technical Implementation Guide
V2R12024-06-1031 of 102 findings match
Cisco IOS Router RTR Security Technical Implementation Guide
32024-11-2530 of 92 findings match
Cisco IOS Router RTR Security Technical Implementation Guide
V3R42025-08-1930 of 92 findings match
Cisco IOS XE Router RTR Security Technical Implementation Guide
32025-05-1630 of 97 findings match
Show 55 more STIGs in this category →
Cisco IOS XE Router RTR Security Technical Implementation Guide
V3R52025-08-1430 of 97 findings match
Juniper Router RTR Security Technical Implementation Guide
V3R22024-12-0530 of 96 findings match
RUCKUS ICX Router Security Technical Implementation Guide
V1R12025-06-0328 of 81 findings match
Cisco IOS XE Switch RTR Security Technical Implementation Guide
32025-05-2026 of 88 findings match
Cisco IOS XE Switch RTR Security Technical Implementation Guide
V3R42026-03-0426 of 88 findings match
Cisco IOS Switch RTR Security Technical Implementation Guide
32024-06-0624 of 53 findings match
Cisco IOS Switch RTR Security Technical Implementation Guide
V3R32026-03-0424 of 53 findings match
Arista MLS EOS 4.X Router Security Technical Implementation Guide
V2R22025-02-2021 of 75 findings match
Cisco NX OS Switch RTR Security Technical Implementation Guide
32024-12-2021 of 78 findings match
Cisco NX OS Switch RTR Security Technical Implementation Guide
V3R42026-03-0421 of 78 findings match
Network Infrastructure Policy Security Technical Implementation Guide
V10R72024-08-0218 of 67 findings match
Cisco ACI Router Security Technical Implementation Guide
12025-06-188 of 45 findings match
Dell OS10 Switch Router Security Technical Implementation Guide
12024-12-118 of 42 findings match
Dell OS10 Switch Router Security Technical Implementation Guide
V1R22026-03-048 of 42 findings match
Firewall Security Requirements Guide
32024-12-047 of 34 findings match
Firewall Security Requirements Guide
V3R32025-09-227 of 35 findings match
Arista MLS EOS 4.X L2S Security Technical Implementation Guide
V2R32025-05-196 of 18 findings match
Cisco IOS Switch L2S Security Technical Implementation Guide
V3R12024-06-066 of 22 findings match
Cisco IOS XE Switch L2S Security Technical Implementation Guide
V3R22025-05-196 of 22 findings match
Cisco NX OS Switch L2S Security Technical Implementation Guide
V3R22024-08-226 of 22 findings match
Application Layer Gateway Security Requirements Guide
22024-12-045 of 155 findings match
Application Layer Gateway Security Requirements Guide
V2R32025-09-155 of 160 findings match
Cisco ASA Firewall Security Technical Implementation Guide
V2R12024-06-065 of 21 findings match
F5 BIG-IP TMOS Firewall Security Technical Implementation Guide
V1R12024-09-095 of 14 findings match
Fortinet FortiGate Firewall Security Technical Implementation Guide
12022-09-125 of 29 findings match
Fortinet FortiGate Firewall Security Technical Implementation Guide
V1R42025-11-195 of 29 findings match
Palo Alto Networks ALG Security Technical Implementation Guide
V3R42025-03-125 of 50 findings match
Cisco ACI Router Security Technical Implementation Guide
V1R22025-12-114 of 26 findings match
Symantec ProxySG ALG Security Technical Implementation Guide
V1R32020-03-274 of 66 findings match
HPE Aruba Networking AOS Wireless Security Technical Implementation Guide
12024-10-293 of 14 findings match
HPE Aruba Networking AOS Wireless Security Technical Implementation Guide
V1R22026-02-253 of 14 findings match
Juniper EX Series Switches Layer 2 Switch Security Technical Implementation Guide
22025-03-073 of 24 findings match
Juniper EX Series Switches Layer 2 Switch Security Technical Implementation Guide
V2R42025-12-103 of 24 findings match
Juniper SRX Services Gateway ALG Security Technical Implementation Guide
V3R32024-12-193 of 24 findings match
Layer 2 Switch Security Requirements Guide
V3R42026-02-123 of 36 findings match
Virtual Private Network (VPN) Security Requirements Guide
32024-12-193 of 82 findings match
Virtual Private Network (VPN) Security Requirements Guide
V3R42025-09-103 of 92 findings match
HP FlexFabric Switch RTR Security Technical Implementation Guide
V1R22020-06-032 of 21 findings match
HPE Aruba Networking AOS VPN Security Technical Implementation Guide
V1R12024-10-292 of 21 findings match
IBM DataPower ALG Security Technical Implementation Guide
V1R12016-01-212 of 65 findings match
Juniper SRX Services Gateway VPN Security Technical Implementation Guide
V3R22024-12-202 of 28 findings match
Layer 2 Switch Security Requirements Guide
32025-03-052 of 28 findings match
Network WLAN AP-IG Platform Security Technical Implementation Guide
V7R32023-02-132 of 9 findings match
Network WLAN Bridge Platform Security Technical Implementation Guide
V7R22023-02-132 of 6 findings match
Network WLAN Controller Platform Security Technical Implementation Guide
V7R32023-02-132 of 6 findings match
SDN Controller Security Requirements Guide
22024-05-282 of 34 findings match
Symantec Edge SWG ALG Security Technical Implementation Guide
V1R12025-12-162 of 15 findings match
Akamai KSD Service Impact Level 2 ALG Security Technical Implementation Guide
V1R12017-09-151 of 33 findings match
Cisco ACI Layer 2 Switch Security Technical Implementation Guide
12025-06-131 of 13 findings match
Cisco ASA VPN Security Technical Implementation Guide
V2R22024-08-221 of 41 findings match
Dell OS10 Switch Layer 2 Switch Security Technical Implementation Guide
V1R12024-12-111 of 20 findings match
Ivanti Connect Secure VPN Security Technical Implementation Guide
22024-06-101 of 15 findings match
Ivanti Connect Secure VPN Security Technical Implementation Guide
V2R22025-09-091 of 15 findings match
Network WLAN AP-NIPR Platform Security Technical Implementation Guide
V7R32023-02-131 of 11 findings match
RUCKUS ICX Layer 2 Switch Security Technical Implementation Guide
V1R12025-06-031 of 24 findings match

Web / Application Server

2 STIGs
Application Security and Development Security Technical Implementation Guide
62025-02-121 of 286 findings match
Application Security and Development Security Technical Implementation Guide
V6R42025-09-091 of 286 findings match

Virtualization / Container

9 STIGs
VMware NSX-T Tier 1 Gateway Firewall Security Technical Implementation Guide
V1R32023-06-222 of 9 findings match
VMware NSX-T Tier-0 Gateway Firewall Security Technical Implementation Guide
V1R32023-06-222 of 7 findings match
Kubernetes Security Technical Implementation Guide
22025-05-161 of 94 findings match
Kubernetes Security Technical Implementation Guide
V2R62026-02-121 of 92 findings match
VMware NSX 4.x Distributed Firewall Security Technical Implementation Guide
V1R22024-12-131 of 6 findings match
VMware NSX 4.x Tier-0 Gateway Firewall Security Technical Implementation Guide
V1R22024-12-131 of 4 findings match
VMware NSX 4.x Tier-1 Gateway Firewall Security Technical Implementation Guide
V1R22024-12-201 of 5 findings match
VMware NSX-T Distributed Firewall Security Technical Implementation Guide
V1R32023-06-231 of 7 findings match
Show 1 more STIG in this category →
VMware NSX-T Tier-0 Gateway RTR Security Technical Implementation Guide
V1R22022-09-011 of 16 findings match

Cloud / Identity Service

1 STIG
Cloud Computing Mission Owner Network Security Requirements Guide
V1R22024-12-204 of 9 findings match

Endpoint Security Management

3 STIGs
Intrusion Detection and Prevention Systems Security Requirements Guide
32025-05-191 of 58 findings match
Intrusion Detection and Prevention Systems Security Requirements Guide
V3R42025-09-221 of 60 findings match
Ivanti Sentry 9.x ALG Security Technical Implementation Guide
V3R12024-09-251 of 32 findings match

Uncategorized

9 STIGs
Nokia Service Router OS 25.x Router Security Technical Implementation Guide
V1R12026-06-1532 of 95 findings match
Firewall Security Requirements Guide
V3R42026-05-237 of 35 findings match
Cisco IOS Switch L2S Security Technical Implementation Guide
V3R22026-05-016 of 22 findings match
Cisco NX OS Switch L2S Security Technical Implementation Guide
V3R42026-06-086 of 22 findings match
Application Layer Gateway Security Requirements Guide
V2R42026-05-235 of 160 findings match
Juniper EX Series Switches Layer 2 Switch Security Technical Implementation Guide
V2R52026-06-033 of 24 findings match
Virtual Private Network (VPN) Security Requirements Guide
V3R52026-05-233 of 92 findings match
Microsoft Windows Server 2025 Security Technical Implementation Guide
V1R22026-05-281 of 292 findings match
Show 1 more STIG in this category →
Nokia Service Router OS 25.x Layer 2 Switch Security Technical Implementation Guide
V1R12026-06-151 of 15 findings match