STIGQter: STIG Summary: Symantec Edge SWG NDM Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Apr 2026:

The Edge SWG must be configured to use tlsv1.2 or greater.

DISA Rule

SV-279249r1170513_rule

Vulnerability Number

V-279249

Group Title

SRG-APP-000172-NDM-000259

Rule Version

SYME-ND-000110

Severity

CAT I

CCI(s)

• CCI-000197 - For password-based authentication, transmit passwords only cryptographically-protected channels.

Weight

10

Fix Recommendation

1. Log in to the Edge SWG SSH CLI.
2. Enter "enable" and "configure terminal".
3. Enter "management-services".
4. Enter "edit https-console".
5. Enter "attribute ssl-versions tlsv1.2 tlsv1.3".

Check Contents

1. Log in to the Edge SWG SSH CLI.
2. Enter "enable" and "configure terminal".
3. Enter "management-services".
4. Enter "edit https-console".
5. Enter "view".

If the "SSL Protocol version" does not equal both "tlsv1.2" and "tlsv1.3", this is a finding.

Vulnerability Number

V-279249

Documentable

False

Rule Version

SYME-ND-000110

Severity Override Guidance

1. Log in to the Edge SWG SSH CLI.
2. Enter "enable" and "configure terminal".
3. Enter "management-services".
4. Enter "edit https-console".
5. Enter "view".

If the "SSL Protocol version" does not equal both "tlsv1.2" and "tlsv1.3", this is a finding.

Check Content Reference

M

Target Key

5726