Application Layer Gateway SRG Version Comparison

There are 17 differences between versions v1 r2 (July 24, 2015) (the "left" version) and v2 r2 (Jan. 30, 2025) (the "right" version).

Check SRG-NET-000700-ALG-000100 was added to the benchmark in the "right" version.

This check's original form is available here.

Title

The ALG must prevent or restrict changes to the configuration of the system under organization-defined circumstances.

Check Content

Verify the ALG is configured to prevent or restrict changes to the configuration of the system under organization-defined circumstances. If the ALG is not configured to prevent or restrict changes to the configuration of the system under organization-defined circumstances, this is a finding.

Discussion

System configuration changes can adversely affect critical system security and privacy functionality. Change restrictions can be enforced through automated mechanisms.

Fix

Configure the ALG to prevent or restrict changes to the configuration of the system under organization-defined circumstances.