STIGQter: STIG Summary: Symantec Edge SWG ALG Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 25 Nov 2025:

The Edge SWG must fail securely in the event of an operational failure.

DISA Rule

SV-279222r1170676_rule

Vulnerability Number

V-279222

Group Title

SRG-NET-000365-ALG-000123

Rule Version

SYME-00-010200

Severity

CAT II

CCI(s)

• CCI-001126 - Prevent systems from entering unsecure states in the event of an operational failure of a boundary protection device.

Weight

10

Fix Recommendation

1. Log in to the Integrated Secure Gateway (ISG) SSH CLI.
2. Enter "enable" and "configure terminal".
3. Enter "bridge view".
4. Find the bridge in use for the Edge SWG, e.g., "passthru-2:0".
5. Enter "bridge edit passthru-2:0 mode fail-closed".

Check Contents

1. Log in to the Integrated Secure Gateway (ISG) SSH CLI.
2. Enter "enable" and "configure terminal".
3. Enter "bridge view".

If the mode for the bridge in use does not state "fail-closed", this is a finding.

Vulnerability Number

V-279222

Documentable

False

Rule Version

SYME-00-010200

Severity Override Guidance

1. Log in to the Integrated Secure Gateway (ISG) SSH CLI.
2. Enter "enable" and "configure terminal".
3. Enter "bridge view".

If the mode for the bridge in use does not state "fail-closed", this is a finding.

Check Content Reference

M

Target Key

5725