AC-4(32)—Process Requirements For Information Transfer
>Control Description
When transferring information between different security domains, the process that transfers information between filter pipelines: a. Does not filter message content; b. Validates filtering metadata; c. Ensures the content associated with the filtering metadata has successfully completed filtering; and d. Transfers the content to the destination filter pipeline.
>Supplemental Guidance
The processes transferring information between filter pipelines have minimum complexity and functionality to provide assurance that the processes operate correctly.