Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The ALG must identify and log internal users associated with denied outgoing communications traffic posing a threat to external information systems.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| SRG-NET-000370-ALG-000125 | SRG-NET-000370-ALG-000125 | SRG-NET-000370-ALG-000125_rule | Medium |
| Description |
|---|
| Without identifying the users who initiated, the traffic it would be difficult to identify those responsible for the denied communications. This requirement applies to those network elements that perform Data Leakage Prevention (DLP)/Extrusion Detection (ED) (e.g., ALGs, proxies, or application level firewalls). |
| STIG | Date |
|---|---|
| Application Layer Gateway Security Requirements Guide | 2014-06-27 |
Details
| Check Text ( C-SRG-NET-000370-ALG-000125_chk ) |
|---|
| Verify the ALG identifies and logs internal users associated with denied outgoing communications traffic posing a threat to external information systems. If the ALG does not identify and log internal users associated with denied outgoing communications traffic posing a threat to external information systems, this is a finding. |
| Fix Text (F-SRG-NET-000370-ALG-000125_fix) |
|---|
| Configure the ALG to identify and log internal users associated with denied outgoing communications traffic posing a threat to external information systems. |