STIGQter: STIG Summary: Application Layer Gateway Security Requirements Guide Version: 2 Release: 4 Benchmark Date: 01 Jul 2026:

The ALG must prohibit the use of cached authenticators after an organization-defined time period.

DISA Rule

SV-205000r831377_rule

Vulnerability Number

V-205000

Group Title

SRG-NET-000344

Rule Version

SRG-NET-000344-ALG-000098

Severity

CAT II

CCI(s)

• CCI-002007 - Prohibit the use of cached authenticators after an organization-defined time period.

Weight

10

Fix Recommendation

Configure the ALG to prohibit the use of cached authenticators after an organization-defined time period.

Check Contents

Verify the ALG prohibits the use of cached authenticators after an organization-defined time period.

If the ALG does not prohibit the use of cached authenticators after an organization-defined time period, this is a finding.

Vulnerability Number

V-205000

Documentable

False

Rule Version

SRG-NET-000344-ALG-000098

Severity Override Guidance

Verify the ALG prohibits the use of cached authenticators after an organization-defined time period.

If the ALG does not prohibit the use of cached authenticators after an organization-defined time period, this is a finding.

Check Content Reference

M

Target Key

2904