Skip to content
ATO Pathways
Log In
Overview
Search
Catalogs
SCAP
OSCAL
Catalogs
Profiles
Documents
References
Knowledge Base
Platform Documentation
Compliance Dictionary
Platform Changelog
About
Catalogs
XCCDF
Symantec ProxySG ALG Security Technical Implementation Guide
SRG-NET-000131-ALG-000086
Symantec ProxySG must be configured to remove or disable unrelated or unneeded application proxy services.
Symantec ProxySG must be configured to remove or disable unrelated or unneeded application proxy services.
An XCCDF Rule
Details
Profiles
Prose
Symantec ProxySG must be configured to remove or disable unrelated or unneeded application proxy services.
Medium Severity
<VulnDiscussion>Unrelated or unneeded proxy services increase the attack vector and add excessive complexity to the securing of the ALG. Multiple application proxies can be installed on many ALGs. However, proxy types must be limited to related functions. At a minimum, the web and email gateway represent different security domains/trust levels. Organizations should also consider separation of gateways that service the DMZ and the trusted network. Possible services that may be configured on the ProxySG: AOL IM DNS Proxy FTP FTPS HTTPS HTTPS Reverse Proxy MMS MSN IM RMTP RTSP SOCKS TLS TCP Tunnel TELNET Yahoo IM</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>