Valid

GB/T 25068.4-2022Information technology - Security techniques - Network security - Part 4: Securing communications between networks using security gateways (English PDF)

信息技术安全技术网络安全第4部分：使用安全网关的网间通信安全保护

Preview PDF

This is a limited preview

Buy now to download the full PDF (37 pages)

Need quotation for your management?

Get a formal quotation for GB/T 25068.4-2022 in 30 minutes.

Issued by

State Administration for Market Regulation, China National Standardization Administration

Level / Type

National · Recommended

Issue date

October 14, 2022

Implementation date

May 1, 2023

Scope

GB/T 25068.4-2022 is the English-translated version of 信息技术安全技术网络安全第4部分：使用安全网关的网间通信安全保护.

GB/T 25068.4-2022 is the Chinese standard "Information technology - Security techniques - Network security - Part 4: Securing communications between networks using security gateways".

Its scope clause reads: This document provides guidelines for the security protection of communication between networks using security gateways (firewalls, application firewalls, intrusion prevention systems, etc.).

South, these security gateways communicate in accordance with documented information security policies, guidelines including. a) identify and analyze cybersecurity threats associated with the security gateway; b) Define the network security requirements of the security gateway based on the threat analysis; c) use techniques designed and implemented to address threats and controls associated with typical cyber scenarios; d) Identify issues related to implementing, operating, monitoring, and reviewing cybersecurity gateway controls. Its clauses include terms and definitions.

Found what you need?

Document preview — GB/T 25068.4-2022

National Standard of the People's Republic of China

ICS: 35.030
Classification: L 80
Replacing: GB/T 25068.3-2010

Issued by: State Administration for Market Regulation, China National Standardization Administration

Preface
Introduction
1 Scope
2 Normative references
3 Terms and Definitions
4 Abbreviations
5 Document Structure
6 Overview
7 Security Threats
8 Security requirements
9 Security Controls
9.1 General
9.2 Stateless Packet Filtering
9.3 Stateful Packet Inspection
9.4 Application Firewall
9.5 Content Filtering
9.6 Intrusion Prevention Systems and Intrusion Detection Systems
9.7 Security Management API
10 Design Techniques
10.1 Security Gateway Components
10.2 Deploying the Security Gateway Control
11 Product Selection Guide
11.1 General
11.2 Selecting the Security Gateway Architecture and Appropriate Components
11.3 Hardware and Software Platforms
11.4 Configuration
11.5 Safety function settings
11.6 Management competencies
11.7 Logging function
11.8 Audit function
11.9 Training and Education
11.10 Implementation Type
11.11 High Availability and Operational Modes
11.12 Other considerations

1 Scope

This document provides guidelines for the security protection of communication between networks using security gateways (firewalls, application firewalls, intrusion prevention systems, etc.).

South, these security gateways communicate in accordance with documented information security policies, guidelines including.

a) identify and analyze cybersecurity threats associated with the security gateway;

b) Define the network security requirements of the security gateway based on the threat analysis;

c) use techniques designed and implemented to address threats and controls associated with typical cyber scenarios;

d) Identify issues related to implementing, operating, monitoring, and reviewing cybersecurity gateway controls.

2 Normative references

The contents of the following documents constitute essential provisions of this document through normative references in the text. Among them, dated citations documents, only the version corresponding to that date applies to this document; for undated references, the latest edition (including all amendments) applies to this document.

ISO /IEC 27033-1 Information technology security technology Cybersecurity Part 1.Overview and concepts (Informationtech-

Note. GB/T 25068.1-2020 Information Technology Security Technology Network Security Part 1.Overview and Concepts (ISO /IEC 27033-1.2015,

IDT)

3 Terms and Definitions

ISO /IEC 27033-1 and the following terms and definitions apply to this document.

3.1 bastionhost

Used to intercept packets in and out of the network, specific hosts with hardened operating systems, and any outsiders accessing services within the organization's firewall

When connecting to the host system, the host system should be connected.

3.2 end-pointsoftware-basedfirewal

A software application that protects network traffic to and from a single machine by allowing or denying communications based on end-user-defined security policies.

3.3

A specially configured or designed operating system to minimize the possibility of potentially unwanted content or attacks.

Note. It may be a general-purpose operating system, such as a Linux system specially configured for the environment, or a solution with a higher degree of customization.

3.4 Internet gateway

Port device to access the Internet.

GB/T 25068.1 | GB/T 25070 | GB/T 25061 | GB/T 25068.7 | GB/T 25068.6 | GB/T 25068.3 | […]

......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 37 pages — is available in the English PDF.

Referenced standards

Normative references

GB/T 25068.1-2020Information technology. Security techniques. Network security - Part 1: Overview and concepts

IEC 27033

How to Download GB/T 25068.4-2022

1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.