STIGQter: STIG Summary: Application Layer Gateway Security Requirements Guide Version: 2 Release: 4 Benchmark Date: 01 Jul 2026:

The ALG must generate unique session identifiers using a FIPS 140-2 approved random number generator.

DISA Rule

SV-204960r396015_rule

Vulnerability Number

V-204960

Group Title

SRG-NET-000234

Rule Version

SRG-NET-000234-ALG-000116

Severity

CAT II

CCI(s)

• CCI-001188 - Generate a unique session identifier for each session with organization-defined randomness requirements.

Weight

10

Fix Recommendation

Configure ALG to generate unique session identifiers using a FIPS 140-2 approved random number generator.

Check Contents

Verify the ALG generates unique session identifiers using a FIPS 140-2 approved random number generator.

If the ALG does not generate unique session identifiers using a FIPS 140-2 approved random number generator, this is a finding.

Vulnerability Number

V-204960

Documentable

False

Rule Version

SRG-NET-000234-ALG-000116

Severity Override Guidance

Verify the ALG generates unique session identifiers using a FIPS 140-2 approved random number generator.

If the ALG does not generate unique session identifiers using a FIPS 140-2 approved random number generator, this is a finding.

Check Content Reference

M

Target Key

2904