STIGQter: STIG Summary: Application Layer Gateway Security Requirements Guide Version: 2 Release: 4 Benchmark Date: 01 Jul 2026:

The ALG providing encryption intermediary services must use NIST FIPS-validated cryptography to implement encryption services.

DISA Rule

SV-205044r1137561_rule

Vulnerability Number

V-205044

Group Title

SRG-NET-000510

Rule Version

SRG-NET-000510-ALG-000111

Severity

CAT II

CCI(s)

• CCI-002450 - Implement organization-defined types of cryptography for each specified cryptography use.

Weight

10

Fix Recommendation

If encryption intermediary services are provided, configure the ALG to use NIST FIPS-validated cryptography to implement encryption services.

Check Contents

If the ALG does not provide encryption intermediary services (e.g., HTTPS, TLS, or DNSSEC), this is not applicable.

Verify the ALG uses NIST FIPS-validated cryptography to implement encryption services.

If the ALG does not use NIST FIPS-validated cryptography to implement encryption services, this is a finding.

Vulnerability Number

V-205044

Documentable

False

Rule Version

SRG-NET-000510-ALG-000111

Severity Override Guidance

If the ALG does not provide encryption intermediary services (e.g., HTTPS, TLS, or DNSSEC), this is not applicable.

Verify the ALG uses NIST FIPS-validated cryptography to implement encryption services.

If the ALG does not use NIST FIPS-validated cryptography to implement encryption services, this is a finding.

Check Content Reference

M

Target Key

2904