UCF STIG Viewer Logo

Application servers providing information flow controls must provide the capability for privileged administrators to configure security policy filters to support different organizational security policies.


Overview

Finding ID Version Rule ID IA Controls Severity
V-35502 SRG-APP-000042-AS-NA SV-46789r1_rule Medium
Description
Application specific examples of flow control enforcement can be found in information protection software (e.g., guards, proxies, gateways and cross domain solutions (CDS)) employing rule sets or establishing configuration settings restricting information system services or providing message filtering capability based on content (e.g., using key word searches or document characteristics). A crucial part of any flow control solution is the ability to create policy filters. Policy filters serve to enact and enforce the organizational policy as it pertains to controlling data flow. Organization defined security policy filters include, for example, file type checking filters, structured data filters, unstructured data filters, metadata content filters, and hidden content filters. Information flow control only applies to a CDS. An AS is not a CDS
STIG Date
Application Server Security Requirements Guide 2013-01-08

Details

Check Text ( C-43843r1_chk )
This requirement is NA for the AS SRG.
Fix Text (F-40044r1_fix)
The requirement is NA. No fix is required.