Home
Security Hardening
DISA Symantec ProxySG Benchmark Alg V1R3

DISA Symantec ProxySG Benchmark Alg V1R3

SYMP-AG-000140 – Symantec ProxySG providing user access control intermediary services must generate audit records when successful/unsuccessful attempts to access web resources occur.
Details Without generating audit records that are specific to the security and mission needs of the organization, it would be...
SYMP-AG-000150 – Symantec ProxySG must produce audit records containing information to establish what type of events occurred.
Details Without establishing what type of event occurred, it would be difficult to establish, correlate, and investigate the events leading...
SYMP-AG-000160 – Symantec ProxySG must produce audit records containing information to establish when (date and time) the events occurred.
Details Without establishing when events occurred, it is impossible to establish, correlate, and investigate the events leading up to an...
SYMP-AG-000040 – Symantec ProxySG providing reverse proxy intermediary services for TLS must be configured to version 1.1 or higher with an approved cipher suite.
Details SP 800-52 provides guidance on using the most secure version and configuration of the TLS/SSL protocol. Using older unauthorized...
SYMP-AG-000170 – Symantec ProxySG must produce audit records containing information to establish where the events occurred.
Details Without establishing where events occurred, it is impossible to establish, correlate, and investigate the events leading up to an...
SYMP-AG-000050 – Symantec ProxySG storing secret or private keys must use FIPS-approved key management technology and processes in the production and control of private/secret cryptographic keys.
Details Private key data is used to prove that the entity presenting a public key certificate is the certificate’s rightful...
SYMP-AG-000180 – Symantec ProxySG must produce audit records containing information to establish the source of the events.
Details Without establishing the source of the event, it is impossible to establish, correlate, and investigate the events leading up...
SYMP-AG-000060 – Symantec ProxySG must implement security policies that enforce approved authorizations for logical access to information and system resources by employing identity-based, role-based, and/or attribute-based security policies.
Details Successful authentication must not automatically give an entity access to an asset or security boundary. The lack of authorization-based...
SYMP-AG-000190 – Symantec ProxySG must produce audit records containing information to establish the outcome of the events.
Details Without information about the outcome of events, security personnel cannot make an accurate assessment as to whether an attack...
SYMP-AG-000070 – Symantec ProxySG must restrict or block harmful or suspicious communications traffic by controlling the flow of information between interconnected networks based on attribute- and content-based inspection of the source, destination, headers, and/or content of the communications traffic – SSL
Details Information flow control regulates where information is allowed to travel within a network and between interconnected networks. Blocking or...

Prev Next

DISA Symantec ProxySG Benchmark Alg V1R3

SYMP-AG-000140 – Symantec ProxySG providing user access control intermediary services must generate audit records when successful/unsuccessful attempts to access web resources occur.

SYMP-AG-000150 – Symantec ProxySG must produce audit records containing information to establish what type of events occurred.

SYMP-AG-000160 – Symantec ProxySG must produce audit records containing information to establish when (date and time) the events occurred.

SYMP-AG-000040 – Symantec ProxySG providing reverse proxy intermediary services for TLS must be configured to version 1.1 or higher with an approved cipher suite.

SYMP-AG-000170 – Symantec ProxySG must produce audit records containing information to establish where the events occurred.

SYMP-AG-000050 – Symantec ProxySG storing secret or private keys must use FIPS-approved key management technology and processes in the production and control of private/secret cryptographic keys.

SYMP-AG-000180 – Symantec ProxySG must produce audit records containing information to establish the source of the events.

SYMP-AG-000060 – Symantec ProxySG must implement security policies that enforce approved authorizations for logical access to information and system resources by employing identity-based, role-based, and/or attribute-based security policies.

SYMP-AG-000190 – Symantec ProxySG must produce audit records containing information to establish the outcome of the events.