AC.L2-3.13.5[c] — System & Communications Protection (Public-Access System Separation)
Domain: System & Communications Protection (SC) | Practice: SC.L2-3.13.5 | Objective ID: 3.13.5[c] | Source: NIST SP 800-171 Rev. 2 / CMMC 2.0 Level 2
Assessment Objective: Communications between public-facing and internal components are controlled.
Control and filter all communications between DMZ/public-facing systems and internal CUI systems through firewalls, application proxies, or API gateways with strict rule sets.