STIGQter: STIG Summary: Application Layer Gateway (ALG) Security Requirements Guide (SRG) Version: 1 Release: 2 Benchmark Date: 24 Jul 2015:

The ALG that provides intermediary services for HTTP must inspect inbound and outbound HTTP traffic for protocol compliance and protocol anomalies.

DISA Rule

SV-68707r1_rule

Vulnerability Number

V-54461

Group Title

SRG-NET-000512-ALG-000066

Rule Version

SRG-NET-000512-ALG-000066

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.
• CCI-001125 - The information system enforces adherence to protocol format.

Weight

10

Fix Recommendation

If the ALG provides intermediary/proxy services for HTTP communications traffic, configure the ALG to inspect inbound and outbound HTTP communications traffic for protocol compliance and protocol anomalies.

Check Contents

If the ALG does not provide intermediary/proxy services for HTTP communications traffic, this is not applicable.

Verify the ALG inspects inbound and outbound HTTP communications traffic for protocol compliance and protocol anomalies.

If the ALG does not inspect inbound and outbound HTTP communications traffic for protocol compliance and protocol anomalies, this is a finding.

Vulnerability Number

V-54461

Documentable

False

Rule Version

SRG-NET-000512-ALG-000066

Severity Override Guidance

If the ALG does not provide intermediary/proxy services for HTTP communications traffic, this is not applicable.

Verify the ALG inspects inbound and outbound HTTP communications traffic for protocol compliance and protocol anomalies.

If the ALG does not inspect inbound and outbound HTTP communications traffic for protocol compliance and protocol anomalies, this is a finding.

Check Content Reference

M

Target Key

2489

Comments