STIGQter: STIG Summary: Symantec Edge SWG NDM Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Apr 2026:

The Edge SWG must be configured to conduct backups of system-level information contained in the information system when changes occur.

DISA Rule

SV-279272r1172804_rule

Vulnerability Number

V-279272

Group Title

SRG-APP-000516-NDM-000340

Rule Version

SYME-ND-000780

Severity

CAT II

CCI(s)

• CCI-000366 - Implement the security configuration settings.
• CCI-000537 - Conduct backups of system-level information contained in the system per organization-defined frequency that is consistent with recovery time and recovery point objectives.
• CCI-000539 - Conduct backups of system documentation, including security-related documentation, per an organization-defined frequency that is consistent with recovery time and recovery point objectives.

Weight

10

Fix Recommendation

1. Log in to the Edge SWG SSH CLI.
2. Enter "enable" and "configure terminal".
3. Enter "archive-configuration archive-signing enforce-signed enable".
4. Enter "archive-configuration automatic-upload".
5. Enter "archive-configuration host" and add the IP address or hostname of the site's SCP backup server.
6. Enter "archive-configuration username" and add the username of the site's SCP backup server.
7. Enter "archive-configuration password" and add the site's password of the site's SCP backup server.
8. Enter "archive-configuration path" and add the site's backup server path (e.g., /home/tachyon-ftp/files/broadcom/).
9. Enter "archive-configuration filename-prefix SG_%l_%Y%m%d%H%M".
10. Enter "archive-configuration periodic-upload minutes 10080".
11. Enter "archive-configuration protocol scp".
12. Enter "archive-configuration scp-authentication password".
13. Enter "archive-configuration ssl-device-profile" and add the "SSL Device Profile" in use for the HTTPS-console and x509 authentication.

Check Contents

1. Log in to the Edge SWG SSH CLI.
2. Enter "show archive-configuration".

If no server is configured, this is a finding.

If "Automatic upload" is not set to "Enabled", this is a finding.

If "Upload interval" is not set for "every 10080 minutes", this is a finding.

Vulnerability Number

V-279272

Documentable

False

Rule Version

SYME-ND-000780

Severity Override Guidance

1. Log in to the Edge SWG SSH CLI.
2. Enter "show archive-configuration".

If no server is configured, this is a finding.

If "Automatic upload" is not set to "Enabled", this is a finding.

If "Upload interval" is not set for "every 10080 minutes", this is a finding.

Check Content Reference

M

Target Key

5726