SC-7 - Boundary Protection

SC-7 requires organizations to monitor and control inbound and outbound network traffic at the system perimeter and between internal trust zones, using mechanisms such as firewalls, gateways, and intrusion detection systems. The control also mandates regular testing, configuration management, and logging of boundary protection devices.