Connections between the DoD enclave and the Internet or other public or commercial wide area networks must require a DMZ.

In order to protect DoD data and systems, all remote access to DoD information systems must be mediated through a managed access control point, such as a remote access server in a DMZ.