The ALG that is part of a CDS must allow configuration of organization-defined security policy filters to support different security policies.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
SRG-NET-000022-ALG-000069	SRG-NET-000022-ALG-000069	SRG-NET-000022-ALG-000069_rule		Medium

Description
The use of security policy filters provides protection for the confidentiality of data by restricting the flow of data. A crucial part of any flow control solution is the ability to configure policy filters. This allows the network element to enforce multiple and different security policies. Policy filters serve to enact and enforce the organizational policy as it pertains to controlling data flow. The cross domain solution must be configured to restrict management access according to the privilege level the user has been granted. Authorization to configure security policies requires the highest privilege level. This control requires the device have the capabilities to allow privileged administrators to configure security filters to support changes in security policy and also to accommodate multiple policies.

Description

The use of security policy filters provides protection for the confidentiality of data by restricting the flow of data. A crucial part of any flow control solution is the ability to configure policy filters. This allows the network element to enforce multiple and different security policies. Policy filters serve to enact and enforce the organizational policy as it pertains to controlling data flow. The cross domain solution must be configured to restrict management access according to the privilege level the user has been granted. Authorization to configure security policies requires the highest privilege level. This control requires the device have the capabilities to allow privileged administrators to configure security filters to support changes in security policy and also to accommodate multiple policies.

STIG	Date
Application Layer Gateway Security Requirements Guide	2014-06-27

Details

Check Text ( C-SRG-NET-000022-ALG-000069_chk )
If the ALG is not part of a CDS, this is not a finding. Verify the ALG is configured to allow privileged administrators to configure the organization-defined security policy filters to support different security policies. If the ALG is not configured to allow privileged administrators to configure the organization-defined security policy filters to support different security policies, this is a finding.

Check Text ( C-SRG-NET-000022-ALG-000069_chk )

If the ALG is not part of a CDS, this is not a finding.

Verify the ALG is configured to allow privileged administrators to configure the organization-defined security policy filters to support different security policies.

If the ALG is not configured to allow privileged administrators to configure the organization-defined security policy filters to support different security policies, this is a finding.

Fix Text (F-SRG-NET-000022-ALG-000069_fix)
Configure the ALG to allow privileged administrators to configure the organization-defined security policy filters to support different security policies.