| This requirement addresses device to device authentication during remote network management sessions used to manage the firewall. A remote connection is any connection with a device communicating through an external network (e.g., the Internet). Remote management must be secured using cryptography; and authentication must use a bidirectional authentication method where each device is authenticated.
Although, in some implementations, VPN connections terminate on the firewall, this is not part of the firewall functionality. Thus, authentication of remote access devices is out of scope for the firewall. |
