Skip to content

III - Administrative Classified

Rules and Groups employed by this XCCDF Profile

  • The CA API Gateway must implement load balancing to limit the effects of known and unknown types of Denial of Service (DoS) attacks.

    If the network does not provide safeguards against DoS attacks, network resources will be unavailable to users. Load balancing provides service redundancy, which reduces the susceptibility of the A...
    Rule Medium Severity
  • SRG-NET-000364-ALG-000122

    Group
  • The CA API Gateway must only allow incoming communications from organization-defined authorized sources routed to organization-defined authorized destinations.

    Unrestricted traffic may contain malicious traffic that poses a threat to an enclave or to other connected networks. Additionally, unrestricted traffic may transit a network, which uses bandwidth a...
    Rule Medium Severity
  • SRG-NET-000380-ALG-000128

    Group
  • The CA API Gateway must behave in a predictable and documented manner that reflects organizational and system objectives when invalid inputs are received.

    A common vulnerability of network elements is unpredictable behavior when invalid inputs are received. This requirement guards against adverse or unintended system behavior caused by invalid inputs...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules