STIGQter: STIG Summary: Application Layer Gateway (ALG) Security Requirements Guide (SRG) Version: 1 Release: 2 Benchmark Date: 24 Jul 2015:

The ALG that intermediary services for FTP must inspect inbound and outbound FTP communications traffic for protocol compliance and protocol anomalies.

DISA Rule

SV-68705r1_rule

Vulnerability Number

V-54459

Group Title

SRG-NET-000512-ALG-000065

Rule Version

SRG-NET-000512-ALG-000065

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.
• CCI-001125 - The information system enforces adherence to protocol format.

Weight

10

Fix Recommendation

If the ALG provides intermediary/proxy services for FTP communications traffic, configure the ALG to inspect inbound and outbound FTP communications traffic for protocol compliance and protocol anomalies.

Check Contents

If the ALG does not provide intermediary/proxy services FTP communications traffic, this is not applicable.

Verify the ALG inspects inbound and outbound FTP communications traffic for protocol compliance and protocol anomalies.

If the ALG does not inspect inbound and outbound FTP communications traffic for protocol compliance and protocol anomalies, this is a finding.

Vulnerability Number

V-54459

Documentable

False

Rule Version

SRG-NET-000512-ALG-000065

Severity Override Guidance

If the ALG does not provide intermediary/proxy services FTP communications traffic, this is not applicable.

Verify the ALG inspects inbound and outbound FTP communications traffic for protocol compliance and protocol anomalies.

If the ALG does not inspect inbound and outbound FTP communications traffic for protocol compliance and protocol anomalies, this is a finding.

Check Content Reference

M

Target Key

2489

Comments