The ALG that is part of a CDS must prohibit the transfer of unsanctioned information in accordance with the security policy when transferring information between different security domains.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
SRG-NET-000285-ALG-000074	SRG-NET-000285-ALG-000074	SRG-NET-000285-ALG-000074_rule		Medium

Description
The ability to prohibit information transfer is fundamentally necessary to prevent unintended and unauthorized data flows. Failure to prohibit information transfer when necessary will risk the confidentiality of information and may also result in the unauthorized release (spillage) of information. Detection of unsanctioned information includes, for example, checking all information to be transferred for malicious code and dirty words.

Description

The ability to prohibit information transfer is fundamentally necessary to prevent unintended and unauthorized data flows. Failure to prohibit information transfer when necessary will risk the confidentiality of information and may also result in the unauthorized release (spillage) of information. Detection of unsanctioned information includes, for example, checking all information to be transferred for malicious code and dirty words.

STIG	Date
Application Layer Gateway Security Requirements Guide	2014-06-27

Details

Check Text ( C-SRG-NET-000285-ALG-000074_chk )
If the ALG is not part of a CDS, this is not a finding. Verify the ALG prohibits the transfer of unsanctioned information in accordance with the security policy when transferring information between different security domains. If the ALG is not configured to prohibit the transfer of unsanctioned information in accordance with the security policy when transferring information between different security domains, this is a finding.

Check Text ( C-SRG-NET-000285-ALG-000074_chk )

If the ALG is not part of a CDS, this is not a finding.

Verify the ALG prohibits the transfer of unsanctioned information in accordance with the security policy when transferring information between different security domains.

If the ALG is not configured to prohibit the transfer of unsanctioned information in accordance with the security policy when transferring information between different security domains, this is a finding.

Fix Text (F-SRG-NET-000285-ALG-000074_fix)
Configure the ALG to prohibit the transfer of unsanctioned information in accordance with the security policy when transferring information between different security domains.