1.1.3 Requirements for a firewall at each Internet connection and between any demilitarized zone (DM

1.1.3.a Verify that firewall configuration standards include
requirements for a firewall at each Internet connection and
between any DMZ and the internal network zone.
1.1.3.b Verify that the current network diagram is consistent with
the firewall configuration standards.