Skip to content

Application Layer Gateway Security Requirements Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • The ALG must employ organization-defined controls by type of denial of service (DoS) to achieve the DoS objective.

    <VulnDiscussion>DoS events can occur due to a variety of internal and external causes, such as an attack by an adversary or a lack of plannin...
    Rule Medium Severity
  • SRG-NET-000715

    <GroupDescription></GroupDescription>
    Group
  • The ALG must implement physically or logically separate subnetworks to isolate organization-defined critical system components and functions.

    &lt;VulnDiscussion&gt;Separating critical system components and functions from other noncritical system components and functions through separate s...
    Rule Medium Severity
  • SRG-NET-000735

    <GroupDescription></GroupDescription>
    Group
  • The ALG must include only approved trust anchors in trust stores or certificate stores managed by the organization.

    &lt;VulnDiscussion&gt;Public key infrastructure (PKI) certificates are certificates with visibility external to organizational systems and certific...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules