Skip to content
ATO Pathways
  Log In

III - Administrative Sensitive

Rules and Groups employed by this XCCDF Profile

  • SRG-NET-000061-ALG-000009

    <GroupDescription></GroupDescription>
    Group
    Show

  • If Symantec ProxySG filters externally initiated traffic, reverse proxy services must be configured.

    &lt;VulnDiscussion&gt;Automated monitoring of remote access traffic allows organizations to detect cyber attacks and also ensure ongoing compliance...
    Rule Medium Severity
    Show

  • SRG-NET-000061-ALG-000009

    <GroupDescription></GroupDescription>
    Group
    Show

  • Symantec ProxySG providing intermediary services for remote access communications traffic must ensure outbound traffic is monitored for compliance with remote access security policies.

    &lt;VulnDiscussion&gt;Automated monitoring of remote access traffic allows organizations to detect cyber attacks and also ensure ongoing compliance...
    Rule Medium Severity
    Show

  • SRG-NET-000062-ALG-000150

    <GroupDescription></GroupDescription>
    Group
    Show

  • Symantec ProxySG providing forward proxy intermediary services for TLS must be configured to comply with the required TLS settings in NIST SP 800-52.

    &lt;VulnDiscussion&gt;SP 800-52 provides guidance on using the most secure version and configuration of the TLS/SSL protocol. Using older unauthori...
    Rule High Severity
    Show

  • SRG-NET-000062-ALG-000150

    <GroupDescription></GroupDescription>
    Group
    Show

  • Symantec ProxySG providing reverse proxy intermediary services for TLS must be configured to version 1.1 or higher with an approved cipher suite.

    &lt;VulnDiscussion&gt;SP 800-52 provides guidance on using the most secure version and configuration of the TLS/SSL protocol. Using older unauthori...
    Rule Medium Severity
    Show

  • SRG-NET-000062-ALG-000092

    <GroupDescription></GroupDescription>
    Group
    Show

  • Symantec ProxySG storing secret or private keys must use FIPS-approved key management technology and processes in the production and control of private/secret cryptographic keys.

    &lt;VulnDiscussion&gt;Private key data is used to prove that the entity presenting a public key certificate is the certificate's rightful owner. Co...
    Rule Medium Severity
    Show

  • SRG-NET-000015-ALG-000016

    <GroupDescription></GroupDescription>
    Group
    Show

  • Symantec ProxySG must implement security policies that enforce approved authorizations for logical access to information and system resources by employing identity-based, role-based, and/or attribute-based security policies.

    &lt;VulnDiscussion&gt;Successful authentication must not automatically give an entity access to an asset or security boundary. The lack of authoriz...
    Rule High Severity
    Show

  • SRG-NET-000019-ALG-000018

    <GroupDescription></GroupDescription>
    Group
    Show

  • Symantec ProxySG must restrict or block harmful or suspicious communications traffic by controlling the flow of information between interconnected networks based on attribute- and content-based inspection of the source, destination, headers, and/or content of the communications traffic.

    &lt;VulnDiscussion&gt;Information flow control regulates where information is allowed to travel within a network and between interconnected network...
    Rule High Severity
    Show

  • SRG-NET-000018-ALG-000017

    <GroupDescription></GroupDescription>
    Group
    Show

  • Symantec ProxySG must enforce approved authorizations for controlling the flow of information within the network based on attribute- and content-based inspection of the source, destination, headers, and/or content of the communications traffic.

    &lt;VulnDiscussion&gt;Information flow control regulates where information is allowed to travel within a network. The flow of all network traffic m...
    Rule Medium Severity
    Show

  • SRG-NET-000019-ALG-000019

    <GroupDescription></GroupDescription>
    Group
    Show

  • Symantec ProxySG must immediately use updates made to policy enforcement mechanisms such as policies and rules.

    &lt;VulnDiscussion&gt;Information flow policies regarding dynamic information flow control include, for example, allowing or disallowing informatio...
    Rule Medium Severity
    Show

  • SRG-NET-000041-ALG-000022

    <GroupDescription></GroupDescription>
    Group
    Show

  • Symantec ProxySG providing user access control intermediary services must display the Standard Mandatory DoD-approved Notice and Consent Banner before granting access to the network.

    &lt;VulnDiscussion&gt;Display of a standardized and approved use notification before granting access to the network ensures that privacy and securi...
    Rule Medium Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules