STIGQter: STIG Summary: Application Layer Gateway Security Requirements Guide Version: 2 Release: 4 Benchmark Date: 01 Jul 2026:

The ALG that is part of a CDS must allow privileged administrators to enable/disable all security policy filters used to enforce information flow control.

DISA Rule

SV-204914r987724_rule

Vulnerability Number

V-204914

Group Title

SRG-NET-000021

Rule Version

SRG-NET-000021-ALG-000068

Severity

CAT II

CCI(s)

• CCI-000034 - Provide the capability for privileged administrators to enable and disable organization-defined security or privacy filters under organization-defined conditions.
• CCI-000366 - Implement the security configuration settings.

Weight

10

Fix Recommendation

If the ALG is part of a CDS, configure the ALG to allow privileged administrators to enable/disable all security policy filters used to enforce information flow control.

Check Contents

If the ALG is not part of a CDS, this is not applicable.

Verify the ALG allows privileged administrators to enable/disable all security policy filters used to enforce information flow control.

If the ALG is not configured to allow privileged administrators to enable/disable all security policy filters used to enforce information flow control, this is a finding.

Vulnerability Number

V-204914

Documentable

False

Rule Version

SRG-NET-000021-ALG-000068

Severity Override Guidance

If the ALG is not part of a CDS, this is not applicable.

Verify the ALG allows privileged administrators to enable/disable all security policy filters used to enforce information flow control.

If the ALG is not configured to allow privileged administrators to enable/disable all security policy filters used to enforce information flow control, this is a finding.

Check Content Reference

M

Target Key

2904