UCF STIG Viewer Logo

The ALG must identify and log internal users associated with denied outgoing communications traffic posing a threat to external information systems.


Overview

Finding ID Version Rule ID IA Controls Severity
V-54643 SRG-NET-000370-ALG-000125 SV-68889r1_rule Medium
Description
Without identifying the users who initiated the traffic, it would be difficult to identify those responsible for the denied communications. This requirement applies to those network elements that perform Data Leakage Prevention (DLP) (e.g., ALGs, proxies, or application level firewalls).
STIG Date
Application Layer Gateway Security Requirements Guide 2014-11-03

Details

Check Text ( C-55263r1_chk )
Verify the ALG identifies and logs internal users associated with denied outgoing communications traffic posing a threat to external information systems.

If the ALG does not identify and log internal users associated with denied outgoing communications traffic posing a threat to external information systems, this is a finding.
Fix Text (F-59499r1_fix)
Configure the ALG to identify and log internal users associated with denied outgoing communications traffic posing a threat to external information systems.