STIGQter: STIG Summary: Application Layer Gateway Security Requirements Guide Version: 2 Release: 4 Benchmark Date: 01 Jul 2026:

The ALG providing user authentication intermediary services must conform to Federal Identity, Credential, and Access Management (FICAM)-issued profiles.

DISA Rule

SV-205002r981646_rule

Vulnerability Number

V-205002

Group Title

SRG-NET-000349

Rule Version

SRG-NET-000349-ALG-000106

Severity

CAT II

CCI(s)

• CCI-004085 - Conform to organization-defined identity management profiles for identity management.

Weight

10

Fix Recommendation

If user authentication intermediary services are provided, configure ALG to conform to FICAM-issued profiles.

Check Contents

If the ALG does not provide user authentication intermediary services, this is not applicable.

Verify the ALG conforms to FICAM-issued profiles.

If the ALG does not conform to FICAM-issued profiles, this is a finding.

Vulnerability Number

V-205002

Documentable

False

Rule Version

SRG-NET-000349-ALG-000106

Severity Override Guidance

If the ALG does not provide user authentication intermediary services, this is not applicable.

Verify the ALG conforms to FICAM-issued profiles.

If the ALG does not conform to FICAM-issued profiles, this is a finding.

Check Content Reference

M

Target Key

2904