Home
Security Hardening
DISA Symantec ProxySG Benchmark NDM V1R2

DISA Symantec ProxySG Benchmark NDM V1R2

SYMP-NM-000010 – Symantec ProxySG must be configured with only one local account that is used as the account of last resort.
Details Authentication for administrative (privileged level) access to the device is required at all times. An account can be created...
SYMP-NM-000020 – Symantec ProxySG must be configured to enforce user authorization to implement least privilege.
Details To mitigate the risk of unauthorized access to sensitive information by entities that have been issued certificates by DoD-approved...
SYMP-NM-000030 – Symantec ProxySG must configure Web Management Console access restrictions to authorized IP address/ranges.
Details It is important that administrative access (SSH, web) to an appliance using the account of last resort be able...
SYMP-NM-000040 – Symantec ProxySG must be configured to enforce assigned privilege levels for approved administrators when accessing the management console, SSH, and the command line interface (CLI).
Details A mechanism to detect and prevent unauthorized communication flow must be configured or provided as part of the system...
SYMP-NM-000050 – Symantec ProxySG must be configured to enforce the limit of three consecutive invalid logon attempts by a user during a 15-minute time period – Lockout duration
Details By limiting the number of failed logon attempts, the risk of unauthorized system access via user password guessing, otherwise...
SYMP-NM-000110 – Symantec ProxySG must be configured to synchronize internal information system clocks with the primary and secondary time sources located in different geographic regions using redundant authoritative time sources.
Details The loss of connectivity to a particular authoritative time source will result in the loss of time synchronization (free-run...
SYMP-NM-000120 – Symantec ProxySG must protect the Web Management Console, SSH, and command line interface (CLI) from unauthorized modification.
Details Protecting audit data also includes identifying and protecting the tools used to view and manipulate log data. Therefore, protecting...
SYMP-NM-000130 – Symantec ProxySG must protect the Web Management Console, SSH, and command line interface (CLI) from unauthorized access.
Details Protecting audit data also includes identifying and protecting the tools used to view and manipulate log data. Therefore, protecting...
SYMP-NM-000140 – Symantec ProxySG must back up event logs onto a different system or system component than the system or component being audited – Syslog Enabled
Details Protection of log data includes assuring log data is not accidentally lost or deleted. Regularly backing up audit records...
SYMP-NM-000140 – Symantec ProxySG must back up event logs onto a different system or system component than the system or component being audited – Syslog IP
Details Protection of log data includes assuring log data is not accidentally lost or deleted. Regularly backing up audit records...

DISA Symantec ProxySG Benchmark NDM V1R2

SYMP-NM-000010 – Symantec ProxySG must be configured with only one local account that is used as the account of last resort.

SYMP-NM-000020 – Symantec ProxySG must be configured to enforce user authorization to implement least privilege.

SYMP-NM-000030 – Symantec ProxySG must configure Web Management Console access restrictions to authorized IP address/ranges.

SYMP-NM-000040 – Symantec ProxySG must be configured to enforce assigned privilege levels for approved administrators when accessing the management console, SSH, and the command line interface (CLI).

SYMP-NM-000050 – Symantec ProxySG must be configured to enforce the limit of three consecutive invalid logon attempts by a user during a 15-minute time period – Lockout duration

SYMP-NM-000110 – Symantec ProxySG must be configured to synchronize internal information system clocks with the primary and secondary time sources located in different geographic regions using redundant authoritative time sources.

SYMP-NM-000120 – Symantec ProxySG must protect the Web Management Console, SSH, and command line interface (CLI) from unauthorized modification.

SYMP-NM-000130 – Symantec ProxySG must protect the Web Management Console, SSH, and command line interface (CLI) from unauthorized access.

SYMP-NM-000140 – Symantec ProxySG must back up event logs onto a different system or system component than the system or component being audited – Syslog Enabled

SYMP-NM-000140 – Symantec ProxySG must back up event logs onto a different system or system component than the system or component being audited – Syslog IP