boundary protection device
1701·updated Aug 30, 2026A device with appropriate mechanisms that: (i) facilitates the adjudication of different interconnected system security policies (e.g., controlling the flow of information into or out of an interconnected system); and/or (ii) provides information system boundary protection.
Source
. Enforcement occurs in boundary protection devices (e.g., encrypted tunnels, routers, gateways, and firewalls) that use rule sets or establishthe sentence this term was read in
A web lookup ran when this term was proposed
A hardware or software mechanism — such as a firewall, router, gateway, guard, or encrypted tunnel — deployed at a logical or physical network boundary to monitor, control, and mediate the flow of communications between zones of differing security policy. What distinguishes it is its dual function: facilitating the adjudication of different interconnected system security policies and/or providing information system boundary protection. The boundary in question may be an authorization boundary for a specific system, the organizational network boundary, or a logical boundary defined by the organization. In practice, systems connect to external networks or information systems only through managed interfaces consisting of boundary protection devices arranged in accordance with an organizational security architecture, and NIST guidance requires that boundary protection devices monitor and control communications at the external boundary of the system and at key internal boundaries within the system.
Advisory only. A term this product ships is defined by an authority document, not by a search result.
Proposed during multiword review of this document in the CKI mapping queue.
Attested in
Classifications
Entity Type
Sensitivity
Information Class
Variants
- synonym
- network boundary device
- plural
- boundary protection devices
- possessive
- boundary protection device's
- pluralpossessive
- boundary protection devices'
Framework definitions
- §1
- A device with appropriate mechanisms that: (i) facilitates the adjudication of different interconnected system security policies (e.g., controlling the flow of information into or out of an interconnected system); and/or (ii) provides information system boundary protection.
- §1
- A device with appropriate mechanisms that: (i) facilitates the adjudication of different interconnected system security policies (e.g., controlling the flow of information into or out of an interconnected system); and/or (ii) provides information system boundary protection.
- §2 · sense_2_pending_review
- A device with appropriate mechanisms that facilitates the adjudication of different security policies for interconnected systems.
- §1
- A device with appropriate mechanisms that facilitates the adjudication of different security policies for interconnected systems.
- §1
- A device with appropriate mechanisms that: (i) facilitates the adjudication of different interconnected system security policies (e.g., controlling the flow of information into or out of an interconnected system); and/or (ii) provides information system boundary protection.
- §1 · attested_usage_reviewer_confirmed
- No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.Increment 2: attested in 800-171r3 without a glossary definition.
- §1 · legacy_primary
- A device with appropriate mechanisms that: (i) facilitates the adjudication of different interconnected system security policies (e.g., controlling the flow of information into or out of an interconnected system); and/or (ii) provides information system boundary protection.DR-088 backfill from the noun definition column