Home
Security Hardening
DISA Symantec ProxySG Benchmark Alg V1R3

DISA Symantec ProxySG Benchmark Alg V1R3

SYMP-AG-000260 – Symantec ProxySG providing intermediary services for HTTP must inspect inbound HTTP traffic for protocol compliance and protocol anomalies – Explicit
Details Application protocol anomaly detection examines application layer protocols such as HTTP to identify attacks based on observed deviations in...
SYMP-AG-000260 – Symantec ProxySG providing intermediary services for HTTP must inspect inbound HTTP traffic for protocol compliance and protocol anomalies – External
Details Application protocol anomaly detection examines application layer protocols such as HTTP to identify attacks based on observed deviations in...
SYMP-AG-000260 – Symantec ProxySG providing intermediary services for HTTP must inspect inbound HTTP traffic for protocol compliance and protocol anomalies – Internal
Details Application protocol anomaly detection examines application layer protocols such as HTTP to identify attacks based on observed deviations in...
SYMP-AG-000270 – Symantec ProxySG providing intermediary services for HTTP must inspect outbound HTTP traffic for protocol compliance and protocol anomalies – Explicit
Details Application protocol anomaly detection examines application layer protocols such as HTTP to identify attacks based on observed deviations in...
SYMP-AG-000270 – Symantec ProxySG providing intermediary services for HTTP must inspect outbound HTTP traffic for protocol compliance and protocol anomalies – External
Details Application protocol anomaly detection examines application layer protocols such as HTTP to identify attacks based on observed deviations in...
SYMP-AG-000270 – Symantec ProxySG providing intermediary services for HTTP must inspect outbound HTTP traffic for protocol compliance and protocol anomalies – Internal
Details Application protocol anomaly detection examines application layer protocols such as HTTP to identify attacks based on observed deviations in...
SYMP-AG-000210 – Symantec ProxySG must use a centralized log server.
Details Information stored in one location is vulnerable to accidental or incidental deletion or alteration. Off-loading is a common process...
SYMP-AG-000220 – Symantec ProxySG must be configured to send the access logs to the centralized log server continuously.
Details Off-loading ensures audit information does not get overwritten if the limited audit storage capacity is reached and also protects...
SYMP-AG-000230 – Symantec ProxySG must provide an alert to, at a minimum, the SCA and ISSO of all audit failure events where the detection and/or prevention function is unable to write events to either local storage or the centralized server – Enabled
Details Without a real-time alert, security personnel may be unaware of an impending failure of the audit capability and system...
SYMP-AG-000230 – Symantec ProxySG must provide an alert to, at a minimum, the SCA and ISSO of all audit failure events where the detection and/or prevention function is unable to write events to either local storage or the centralized server – From
Details Without a real-time alert, security personnel may be unaware of an impending failure of the audit capability and system...

Prev Next

DISA Symantec ProxySG Benchmark Alg V1R3

SYMP-AG-000260 – Symantec ProxySG providing intermediary services for HTTP must inspect inbound HTTP traffic for protocol compliance and protocol anomalies – Explicit

SYMP-AG-000260 – Symantec ProxySG providing intermediary services for HTTP must inspect inbound HTTP traffic for protocol compliance and protocol anomalies – External

SYMP-AG-000260 – Symantec ProxySG providing intermediary services for HTTP must inspect inbound HTTP traffic for protocol compliance and protocol anomalies – Internal

SYMP-AG-000270 – Symantec ProxySG providing intermediary services for HTTP must inspect outbound HTTP traffic for protocol compliance and protocol anomalies – Explicit

SYMP-AG-000270 – Symantec ProxySG providing intermediary services for HTTP must inspect outbound HTTP traffic for protocol compliance and protocol anomalies – External

SYMP-AG-000270 – Symantec ProxySG providing intermediary services for HTTP must inspect outbound HTTP traffic for protocol compliance and protocol anomalies – Internal

SYMP-AG-000210 – Symantec ProxySG must use a centralized log server.

SYMP-AG-000220 – Symantec ProxySG must be configured to send the access logs to the centralized log server continuously.

SYMP-AG-000230 – Symantec ProxySG must provide an alert to, at a minimum, the SCA and ISSO of all audit failure events where the detection and/or prevention function is unable to write events to either local storage or the centralized server – Enabled

SYMP-AG-000230 – Symantec ProxySG must provide an alert to, at a minimum, the SCA and ISSO of all audit failure events where the detection and/or prevention function is unable to write events to either local storage or the centralized server – From