CA API Gateway ALG Security Technical Implementation Guide
Rules, Groups, and Values defined within the XCCDF Benchmark
-
The CA API Gateway providing content filtering must automatically update malicious code protection mechanisms.
The malicious software detection functionality on network elements needs to be constantly updated in order to identify new threats as they are discovered. All malicious software detection function...Rule Medium Severity -
SRG-NET-000273-ALG-000129
Group -
The CA API Gateway must generate error messages that provide the information necessary for corrective actions without revealing information that could be exploited by adversaries.
Providing too much information in error messages risks compromising the data and security of the application and system. Organizations must carefully consider the structure/content of error messag...Rule Medium Severity -
SRG-NET-000288-ALG-000109
Group -
SRG-NET-000289-ALG-000110
Group -
SRG-NET-000339-ALG-000090
Group -
SRG-NET-000313-ALG-000010
Group -
The CA API Gateway providing intermediary services for remote access communications traffic must control remote access methods.
Remote access devices, such as those providing remote access to network devices and information systems, that lack automated control capabilities increase risk and makes remote user access manageme...Rule Medium Severity -
SRG-NET-000318-ALG-000014
Group -
To protect against data mining, the CA API Gateway providing content filtering must prevent code injection attacks from being launched against data storage objects, including, at a minimum, databases, database records, queries, and fields.
Data mining is the analysis of large quantities of data to discover patterns and is used in intelligence gathering. Failure to prevent attacks launched against organizational information from unaut...Rule Medium Severity -
SRG-NET-000318-ALG-000151
Group -
To protect against data mining, the CA API Gateway providing content filtering must prevent code injection attacks launched against application objects including, at a minimum, application URLs and application code.
Data mining is the analysis of large quantities of data to discover patterns and is used in intelligence gathering. Failure to prevent attacks launched against organizational information from unaut...Rule Medium Severity -
SRG-NET-000318-ALG-000152
Group -
SRG-NET-000319-ALG-000015
Group -
To protect against data mining, the CA API Gateway providing content filtering must detect code injection attacks from being launched against data storage objects, including, at a minimum, databases, database records, queries, and fields.
Data mining is the analysis of large quantities of data to discover patterns and is used in intelligence gathering. Failure to detect attacks launched against organizational databases may result in...Rule Medium Severity -
SRG-NET-000319-ALG-000020
Group -
SRG-NET-000319-ALG-000153
Group -
To protect against data mining, the CA API Gateway providing content filtering as part of its intermediary services must detect code injection attacks launched against application objects including, at a minimum, application URLs and application code.
Data mining is the analysis of large quantities of data to discover patterns and is used in intelligence gathering. Failure to detect attacks launched against organizational applications may result...Rule Medium Severity -
SRG-NET-000334-ALG-000050
Group -
SRG-NET-000340-ALG-000091
Group
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.