The ALG must identify and log internal users associated with denied outgoing communications traffic posing a threat to external information systems.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-205010	SRG-NET-000370-ALG-000125	SV-205010r831386_rule		Medium

Description

Without identifying the users who initiated the traffic, it would be difficult to identify those responsible for the denied communications. This requirement applies to those network elements that perform Data Leakage Prevention (DLP) (e.g., ALGs, proxies, or application level firewalls).

STIG	Date
Application Layer Gateway Security Requirements Guide	2024-12-04

Details

Check Text (C-5278r396403_chk)

Verify the ALG identifies and logs internal users associated with denied outgoing communications traffic posing a threat to external information systems.

If the ALG does not identify and log internal users associated with denied outgoing communications traffic posing a threat to external information systems, this is a finding.

Fix Text (F-5278r396404_fix)

Configure the ALG to identify and log internal users associated with denied outgoing communications traffic posing a threat to external information systems.