No profile (default benchmark)

SRG-NET-000384

The ALG providing content filtering must detect use of network services that have not been authorized or approved by the ISSM and ISSO, at a minimum.

SRG-NET-000385

The ALG providing content filtering must generate a log record when unauthorized network services are detected.

SRG-NET-000385

The ALG providing content filtering must generate an alert to, at a minimum, the ISSO and ISSM when unauthorized network services are detected.

SRG-NET-000390

The ALG providing content filtering must continuously monitor inbound communications traffic crossing internal security boundaries for unusual or unauthorized activities or conditions.

SRG-NET-000391

The ALG providing content filtering must continuously monitor outbound communications traffic crossing internal security boundaries for unusual/unauthorized activities or conditions.

SRG-NET-000392

The ALG providing content filtering must send an alert to, at a minimum, the ISSO and ISSM when detection events occur.

SRG-NET-000392

The ALG providing content filtering must generate an alert to, at a minimum, the ISSO and ISSM when threats identified by authoritative sources (e.g., IAVMs or CTOs) are detected.

SRG-NET-000392

The ALG providing content filtering must generate an alert to, at a minimum, the ISSO and ISSM when root level intrusion events which provide unauthorized privileged access are detected.

SRG-NET-000392

The ALG providing content filtering must generate an alert to, at a minimum, the ISSO and ISSM when user level intrusions which provide non-privileged access are detected.

SRG-NET-000392

The ALG providing content filtering must generate an alert to, at a minimum, the ISSO and ISSM when denial of service incidents are detected.

SRG-NET-000392

The ALG providing content filtering must generate an alert to, at a minimum, the ISSO and ISSM when new active propagation of malware infecting DoD systems or malicious code adversely affecting the operations and/or security of DoD systems is detected.

SRG-NET-000393

The ALG that implements spam protection mechanisms must be updated automatically.

SRG-NET-000400

The ALG providing user authentication intermediary services must transmit only encrypted representations of passwords.

SRG-NET-000401

The ALG must check the validity of all data inputs except those specifically identified by the organization.

SRG-NET-000402

The ALG must reveal error messages only to the ISSO, ISSM, and SCA.

SRG-NET-000492

The ALG must generate audit records when successful/unsuccessful attempts to access security objects occur.

SRG-NET-000493

The ALG that is part of a CDS must generate audit records when successful/unsuccessful attempts to access security levels occur.

SRG-NET-000494

The ALG must generate audit records when successful/unsuccessful attempts to access categories of information (e.g., classification levels) occur.

SRG-NET-000495

The ALG providing user access control intermediary services must generate audit records when successful/unsuccessful attempts to modify privileges occur.

SRG-NET-000496

The ALG must generate audit records when successful/unsuccessful attempts to modify security objects occur.

SRG-NET-000497

The ALG must generate audit records when successful/unsuccessful attempts to modify security levels occur.

SRG-NET-000498

The ALG must generate audit records when successful/unsuccessful attempts to modify categories of information (e.g., classification levels) occur.

SRG-NET-000499

The ALG providing user access control intermediary services must generate audit records when successful/unsuccessful attempts to delete privileges occur.

SRG-NET-000500

The ALG must generate audit records when successful/unsuccessful attempts to delete security levels occur.

SRG-NET-000501

The ALG must generate audit records when successful/unsuccessful attempts to delete security objects occur.