Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The ALG providing authentication proxy connections must accept Personal Identity Verification (PIV) credentials from other federal agencies.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| SRG-NET-000346-ALG-000103 | SRG-NET-000346-ALG-000103 | SRG-NET-000346-ALG-000103_rule | Medium |
| Description |
|---|
| Access may be denied to authorized users if federal agency PIV credentials are not accepted. Personal Identity Verification (PIV) credentials are those credentials issued by federal agencies that conform to FIPS Publication 201 and supporting guidance documents. OMB Memorandum 11-11 requires federal agencies to continue implementing the requirements specified in HSPD-12 to enable agency-wide use of PIV credentials. This requirement applies to ALGs that provide user authentication proxy services (e.g., authentication gateway or TLS/SSL gateway). This does not apply to authentication for the purpose of configuring the device itself (device management). |
| STIG | Date |
|---|---|
| Application Layer Gateway Security Requirements Guide | 2014-06-27 |
Details
| Check Text ( C-SRG-NET-000346-ALG-000103_chk ) |
|---|
| If the ALG does not provide user authentication proxy services, this is not a finding. Verify the ALG accepts Personal Identity Verification (PIV) credentials from other federal agencies. If the ALG does not accept Personal Identity Verification (PIV) credentials from other federal agencies, this is a finding. |
| Fix Text (F-SRG-NET-000346-ALG-000103_fix) |
|---|
| Configure ALG to accept Personal Identity Verification (PIV) credentials from other federal agencies. |