The ALG that is part of a CDS must enforce information flow control using organization-defined security policy filters as a basis for flow control decisions for organization-defined information flows.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
SRG-NET-000033-ALG-000083	SRG-NET-000033-ALG-000083	SRG-NET-000033-ALG-000083_rule		Medium

Description
The use of security policy filters provides protection for the confidentiality of data by restricting the flow of data. Configure organization-defined specific filters and their order of execution for each information flow. For example, security policy filters may include data content filtering rules that monitor for and block specific words (e.g., key word indicators such as terms associated with classified mission), enumerated values, or data value ranges, and hidden content.

Description

The use of security policy filters provides protection for the confidentiality of data by restricting the flow of data. Configure organization-defined specific filters and their order of execution for each information flow. For example, security policy filters may include data content filtering rules that monitor for and block specific words (e.g., key word indicators such as terms associated with classified mission), enumerated values, or data value ranges, and hidden content.

STIG	Date
Application Layer Gateway Security Requirements Guide	2014-06-27

Details

Check Text ( C-SRG-NET-000033-ALG-000083_chk )
If the ALG is not part of a CDS, this is not a finding. Verify the ALG is configured to enforce information flow control using organization-defined security policy filters as a basis for flow control decisions for organization-defined information flows. If the ALG is not configured to enforce information flow control using organization-defined security policy filters as a basis for flow control decisions for organization-defined information flows, this is a finding.

Check Text ( C-SRG-NET-000033-ALG-000083_chk )

If the ALG is not part of a CDS, this is not a finding.

Verify the ALG is configured to enforce information flow control using organization-defined security policy filters as a basis for flow control decisions for organization-defined information flows.

If the ALG is not configured to enforce information flow control using organization-defined security policy filters as a basis for flow control decisions for organization-defined information flows, this is a finding.

Fix Text (F-SRG-NET-000033-ALG-000083_fix)
Configure the ALG to enforce information flow control using organization-defined security policy filters as a basis for flow control decisions for organization-defined information flows.