The ALG that is part of a CDS, when transferring information between different security domains, must use organization-defined data type identifiers to validate data essential for information flow decisions.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-54469	SRG-NET-000324-ALG-000070	SV-68715r1_rule		Medium

Description
Information flow decisions based on invalid data may allow unintended and unauthorized data flows, and therefore risk the confidentiality of information. They may also result in the unauthorized release (spill) of information. Data type identifiers include, for example, file names, file types, file signatures/tokens, and multiple internal file signatures/tokens. Information systems may allow transfer of data only if compliant with data type format specifications.

Description

Information flow decisions based on invalid data may allow unintended and unauthorized data flows, and therefore risk the confidentiality of information. They may also result in the unauthorized release (spill) of information. Data type identifiers include, for example, file names, file types, file signatures/tokens, and multiple internal file signatures/tokens. Information systems may allow transfer of data only if compliant with data type format specifications.

STIG	Date
Application Layer Gateway (ALG) Security Requirements Guide (SRG)	2015-06-30

Details

Check Text ( C-55085r1_chk )
If the ALG is not part of a CDS, this is not applicable. Verify the ALG is configured to use organization-defined data type identifiers to validate data essential for information flow decisions. If the ALG is not configured to use organization-defined data type identifiers to validate data essential for information flow decisions, this is a finding.

Fix Text (F-59323r1_fix)
If the ALG is part of a CDS, configure the ALG to use organization-defined data type identifiers to validate data essential for information flow decisions.