The ALG providing authentication and access intermediary services must provide the capability for authorized users to capture, record, and log all content related to a user session.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| SRG-NET-000399-ALG-000042 | SRG-NET-000399-ALG-000042 | SRG-NET-000399-ALG-000042_rule | Medium |
| Description |
|---|
| Without the capability to capture, record, and log all content related to a user session, investigations into suspicious user activity would be hampered. |
| STIG | Date |
|---|---|
| Application Layer Gateway Security Requirements Guide | 2014-06-27 |
Details
| Check Text ( C-SRG-NET-000399-ALG-000042_chk ) |
|---|
| If the ALG does not provide access control and intermediary services, this is not a finding. Verify the ALG provides the capability for authorized users to capture, record, and log all content related to a user session. If the ALG does not provide the capability for authorized users to capture, record, and log all content related to a user session, this is a finding. |
| Fix Text (F-SRG-NET-000399-ALG-000042_fix) |
|---|
| Configure the ALG to provide the capability for authorized users to capture, record, and log all content related to a user session. |