Topic

Functional separation between servers

Applicable to

all

History

Priority

should

2015

Servers should maintain effective functional separation with other servers allowing them tooperate independently and minimise communications with other servers at both the networkand file system level.

2010

Where high value servers have connectivity to unsecured public networks, agencies should:• maintain effective functional separation between servers allowing them to operate independently• minimise communications between servers at both the network and file system level as appropriate• limit system users and programs to the minimum access needed to perform their duties.

2008

Where high risk servers–such as Web, email, file and Internet Protocol telephony servers–have connectivity to uncontrolled public networks, agencies should: a. maintain effective functional separation between servers allowing them to operate independently b. minimise communications between servers at both the network and filesystem level, as appropriate c. limit system users and programs to the minimum access needed to perform their duties.