# NIST 800-171 3.1.14 Route remote access via managed access control points.

- Source: https://support.icompaas.com/support/solutions/articles/62000229247-nist-800-171-3-1-14-route-remote-access-via-managed-access-control-points-
- Section: [Solutions](https://support.icompaas.com/support/solutions) › [NIST](https://support.icompaas.com/support/solutions/62000112528) › [800-171](https://support.icompaas.com/support/solutions/folders/62000168440)
- Last updated: 2026-05-29
- Publisher: iCompaas, Inc. (https://www.icompaas.com)

**Description:** 

Routing remote access through managed access control points enhances explicit, organizational control over such connections, reducing the susceptibility to unauthorized access to organizational systems resulting in the unauthorized disclosure of CUI. 

  

**Priority:** High 

  

**Category: Network Security**

  

**Services Associated with AWS:** 

-   AWS Virtual Private Network (VPN), AWS Direct Connect, AWS Transit Gateway

  

**Objective Evidence:** 

-   Administrative: documented policies, standards & procedures 
-   Administrative: supporting documentation to demonstrate the "secure practices" used to build technology platform-specific secure baseline configurations 
-   Technical: screen shot of firewall/VPN settings

  

**Possible Technology Considerations:** 

-   **VPN Concentrator Secure Baseline Configurations (SBC)** 

  

**What needs to be answered:** 

Is remote access only maintained by the IT department and routed through a limited number of managed access control points? 

  

-   Ensure Routing of Remote Access Via Managed Control Points  
    Description: This check confirms that remote access is routed through managed access control points, enhancing organizational control over such connections and reducing the susceptibility to unauthorized access.  
    

  

**More details:** Remote access is managed via a controlled access point.

## Related compliance guidance

- [NIST SP 800-53 Rev. 5: a practical implementation guide for cloud teams](https://support.icompaas.com/compliance/nist-sp-800-53-rev-5): How the 800-53 catalogue, baselines and the Risk Management Framework fit together, and which controls take the most work in the cloud.
- [NIST SP 800-171 and CMMC: a practical guide to protecting CUI in the cloud](https://support.icompaas.com/compliance/nist-sp-800-171-rev-3): If the driver is a DoD or federal contract handling CUI, 800-171 (and CMMC) is the scope you actually need.