| Configuration and enforcement of administrator privileges ensures only authorized users have access to certain commands and functions on the network element.
The use of security policy filters provides protection for the confidentiality of data by restricting the flow of data. A crucial part of any flow control solution is the ability to enable and disable policy filters. Policy filters serve to enact and enforce the organizational policy as it pertains to controlling data flow. Security policy filters can address data structures and content. These filters may include dirty word filters, file type checking filters, structured data filters, unstructured data filters, metadata content filters, and hidden content filters.
This control can be met by assigning the privilege to enable or disable security policy filters to privilege groups and then assigning users to these groups (role-based access control). Authorization to add, modify, or delete security policy filters must require the highest privilege level. If system administrators cannot be configured with different security privileges, then need-to-know cannot be enforced. |
