The gateway is the interface to the cloud, and hosts a number of security controls—for example, the IBM Watson IoT Platform gateway allows administrators to set up blacklists that exclude specific devices, and whitelists that authorize specific devices for communications.
Some CSPs are evaluating the ability to offer device scanning and profiling to ascertain the current security state of a device prior to allowing connectivity. However, due to the scale of the IoT this becomes difficult to achieve.