message-filtering capability
163553·updated Aug 30, 2026No definition recorded.
Composition
Source
, or provide a message-filtering capability based on message content (e.g., implementing key word searches or using document characteristics). Organizations also consider the trustworthiness of filtering and inspection mechanisms (i.e., hardware, firmware, and software components) that are critical tothe sentence this term was read in
generalized from a web lookup of the quoted expression at proposal time Verdict: term of art.
- AC-4 - NIST 800-53 r5 Control Explorer - GRC Academy
- NIST 800-53 AC-4 - Mappings Explorer
- – AC-4 INFORMATION FLOW ENFORCEMENT | NIST SP 800-53
A definition generalized from search results is a draft to react to, not provenance. Confirm it against an authority document before this term is verified.
A web lookup ran when this term was proposed
A security control function, implemented in boundary protection devices such as gateways, guards, or firewalls, that regulates where information can travel within a system and between systems by inspecting and acting on message content itself — for example, through keyword searches or document characteristics — rather than on network-layer header attributes alone. Enforcement mechanisms compare security attributes associated with information (data content and data structure) and source/destination objects, and respond appropriately — blocking, quarantining, or alerting — when they encounter information flows not explicitly permitted by policy. In practice, flow control restrictions enforced this way include keeping export-controlled information from being transmitted in the clear, restricting unauthorized web requests, and limiting information transfers between organizations based on data structures and content.
Advisory only. A term this product ships is defined by an authority document, not by a search result.
Proposed during multiword review of this document in the CKI mapping queue.
Attested in
No recorded attestations. They are written when an MWE tagging stage is completed, stamped with the pack version and the document’s digest.