STIGQter: STIG Summary: Application Layer Gateway Security Requirements Guide Version: 2 Release: 4 Benchmark Date: 01 Jul 2026:

The ALG must off-load audit records onto a centralized log server.

DISA Rule

SV-204995r831372_rule

Vulnerability Number

V-204995

Group Title

SRG-NET-000334

Rule Version

SRG-NET-000334-ALG-000050

Severity

CAT II

CCI(s)

CCI-001851 - Transfer audit logs per organization-defined frequency to a different system, system component, or media than the system or system component conducting the logging.

Weight

Fix Recommendation

Configure the ALG to off-load audit records onto a centralized log server.

Check Contents

Verify the ALG off-loads audit records onto a centralized log server.

If the ALG does not off-load audit records onto a centralized log server, this is a finding.

Vulnerability Number

V-204995

Documentable

False

Rule Version

SRG-NET-000334-ALG-000050

Severity Override Guidance

Verify the ALG off-loads audit records onto a centralized log server.

If the ALG does not off-load audit records onto a centralized log server, this is a finding.

Check Content Reference

Target Key

2904