The ALG must prevent or restrict changes to the configuration of the system under organization-defined circumstances.

Overview

Finding IDVersionRule IDIA ControlsSeverity
V-263540SRG-NET-000700-ALG-000100SV-263540r982391_ruleCCI-003928medium
Description
System configuration changes can adversely affect critical system security and privacy functionality. Change restrictions can be enforced through automated mechanisms.
STIGDate
Application Layer Gateway Security Requirements Guide2024-12-04

Details

Check Text (C-263540r982391_chk)

Verify the ALG is configured to prevent or restrict changes to the configuration of the system under organization-defined circumstances. If the ALG is not configured to prevent or restrict changes to the configuration of the system under organization-defined circumstances, this is a finding.

Fix Text (F-67348r981650_fix)

Configure the ALG to prevent or restrict changes to the configuration of the system under organization-defined circumstances.