A policy that describes the transport protocol, allowed content types, and the content filtering actions required to address the data attack, data hiding and data disclosure risks of the content being transferred. It may also include other restrictions such as file size or allowed security markings and rules on determining how to route the data to the appropriate destination security domain(s) based on the filtering rules applied. The dataflow filtering policy also implements the CDS portion of foreign partner information exchange agreements when a transfer CDS is used to transfer data to a foreign partner.
Sources:
CNSSI 4009-2022