Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The ALG providing authentication and access intermediary services must provide the capability for authorized users to capture, record, and log all content related to a user session.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| SRG-NET-000399-ALG-000042 | SRG-NET-000399-ALG-000042 | SRG-NET-000399-ALG-000042_rule | Medium |
| Description |
|---|
| Without the capability to capture, record, and log all content related to a user session, investigations into suspicious user activity would be hampered. |
| STIG | Date |
|---|---|
| Application Layer Gateway Security Requirements Guide | 2014-06-27 |
Details
| Check Text ( C-SRG-NET-000399-ALG-000042_chk ) |
|---|
| If the ALG does not provide access control and intermediary services, this is not a finding. Verify the ALG provides the capability for authorized users to capture, record, and log all content related to a user session. If the ALG does not provide the capability for authorized users to capture, record, and log all content related to a user session, this is a finding. |
| Fix Text (F-SRG-NET-000399-ALG-000042_fix) |
|---|
| Configure the ALG to provide the capability for authorized users to capture, record, and log all content related to a user session. |