No profile (default benchmark)

SRG-NET-000053-ALG-000001

The ALG providing user access control intermediary services must limit the number of concurrent sessions to an organization-defined number for all accounts and/or account types.

SRG-NET-000061-ALG-000009

The ALG providing intermediary services for remote access communications traffic must ensure inbound and outbound traffic is monitored for compliance with remote access security policies.

SRG-NET-000313-ALG-000010

The ALG providing intermediary services for remote access communications traffic must control remote access methods.

SRG-NET-000062-ALG-000011

The ALG providing intermediary services for remote access communications traffic must use encryption services that implement NIST FIPS-validated cryptography to protect the confidentiality of remote access sessions.

SRG-NET-000062-ALG-000150

The ALG that provides intermediary services for TLS must be configured to comply with the required TLS settings in NIST SP 800-52.

SRG-NET-000063-ALG-000012

The ALG providing intermediary services for remote access communications traffic must use NIST FIPS-validated cryptography to protect the integrity of remote access sessions.

SRG-NET-000314-ALG-000013

The ALG providing intermediary services for remote access communications traffic must provide the capability to immediately disconnect or disable remote access to the information system.

SRG-NET-000318-ALG-000014

To protect against data mining, the ALG providing content filtering must prevent code injection attacks from being launched against data storage objects, including, at a minimum, databases, database records, queries, and fields.

SRG-NET-000318-ALG-000151

To protect against data mining, the ALG providing content filtering must prevent code injection attacks launched against application objects including, at a minimum, application URLs and application code.

SRG-NET-000318-ALG-000152

To protect against data mining, the ALG providing content filtering must prevent SQL injection attacks launched against data storage objects, including, at a minimum, databases, database records, and database fields.

SRG-NET-000319-ALG-000015

To protect against data mining, the ALG providing content filtering must detect code injection attacks from being launched against data storage objects, including, at a minimum, databases, database records, queries, and fields.

SRG-NET-000319-ALG-000153

To protect against data mining, the ALG providing content filtering as part of its intermediary services must detect code injection attacks launched against application objects including, at a minimum, application URLs and application code.

SRG-NET-000015-ALG-000016

The ALG must enforce approved authorizations for logical access to information and system resources by employing identity-based, role-based, and/or attribute-based security policies.

SRG-NET-000018-ALG-000017

The ALG must enforce approved authorizations for controlling the flow of information within the network based on attribute- and content-based inspection of the source, destination, headers, and/or content of the communications traffic.

SRG-NET-000019-ALG-000018

The ALG must restrict or block harmful or suspicious communications traffic by controlling the flow of information between interconnected networks based on attribute- and content-based inspection of the source, destination, headers, and/or content of the communications traffic.

SRG-NET-000019-ALG-000019

The ALG must immediately use updates made to policy enforcement mechanisms such as policy filters, rules, signatures, and analysis algorithms for gateway and/or intermediary functions.

SRG-NET-000019-ALG-000021

The ALG that is part of a CDS must apply information flow control to data transferred between security domains by means of a policy filter which consists of a set of hardware and/or software.

SRG-NET-000041-ALG-000022

The ALG providing user access control intermediary services must display the Standard Mandatory DoD-approved Notice and Consent Banner before granting access to the network.

SRG-NET-000042-ALG-000023

The ALG providing user access control intermediary services must retain the Standard Mandatory DoD-approved Notice and Consent Banner on the screen until users acknowledge the usage conditions and take explicit actions to log on for further access.

SRG-NET-000043-ALG-000024

The ALG providing user access control intermediary services for publicly accessible applications must display the Standard Mandatory DoD-approved Notice and Consent Banner before granting access to the system.

SRG-NET-000513-ALG-000026

The ALG providing user access control intermediary services must generate audit records when successful/unsuccessful attempts to access privileges occur.

SRG-NET-000492-ALG-000027

The ALG must generate audit records when successful/unsuccessful attempts to access security objects occur.

SRG-NET-000493-ALG-000028

The ALG that is part of a CDS must generate audit records when successful/unsuccessful attempts to access security levels occur.

SRG-NET-000494-ALG-000029

The ALG must generate audit records when successful/unsuccessful attempts to access categories of information (e.g., classification levels) occur.

SRG-NET-000495-ALG-000030

The ALG providing user access control intermediary services must generate audit records when successful/unsuccessful attempts to modify privileges occur.