STIGQter: STIG Summary: Symantec Edge SWG ALG Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 25 Nov 2025:

The Edge SWG must deny network communications traffic by default and allow network communications traffic by exception (i.e., deny all, permit by exception).

DISA Rule

SV-279168r1170614_rule

Vulnerability Number

V-279168

Group Title

SRG-NET-000202-ALG-000124

Rule Version

SYME-00-002800

Severity

CAT II

CCI(s)

CCI-001109 - Deny network communications traffic by default and allow network communications traffic by exception at managed interfaces; and/or for organization-defined systems.

Weight

Fix Recommendation

1. In the Edge SWG Web UI, navigate to the Configuration tab.
2. Select "Policy and Policy Settings".
3. Set the Default Proxy Policy to "Deny".
4. Click "Apply", then "Save".

Check Contents

1. In the Edge SWG Web UI, navigate to the Configuration tab.
2. Select "Policy and Policy Settings".

If the Default Proxy Policy is set to "Allow", this is a finding.

Vulnerability Number

V-279168

Documentable

False

Rule Version

SYME-00-002800

Severity Override Guidance

1. In the Edge SWG Web UI, navigate to the Configuration tab.
2. Select "Policy and Policy Settings".

If the Default Proxy Policy is set to "Allow", this is a finding.

Check Content Reference

Target Key

5725