AC.2.015 Route remote access via managed access control points.

CMMC Practice AC.2.015: Route remote access via managed access control points.

Links to Publicly Available Resources

CMMC CLARIFICATION (Ref CMMC – Appendix B)
You can limit the number of remote access control points. This reduces the attack surface for organizations. Route all remote access sessions through as few points as possible. This:

  • allows for better visibility into the traffic coming into the network;
  • simplifies network management; and
  • increases the ability to monitor and control the connections.