STIGQter STIGQter: STIG Summary: CA API Gateway ALG Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 28 Apr 2017:

The CA API Gateway providing content filtering must send an alert to, at a minimum, the ISSO and ISSM when detection events occur.

DISA Rule

SV-86077r1_rule

Vulnerability Number

V-71453

Group Title

SRG-NET-000392-ALG-000141

Rule Version

CAGW-GW-000770

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Open the CA API Gateway - Policy Manager and double-click any of the Registered Services that did not include the "Send Email Alert" Assertion.

Add the "Send Email Alert" Assertion to the policy and configure the parameters for the Assertion to meet organizational requirements.

Note that the Assertion should be added after a detection event occurs, such as a threat detection event detecting a SQL injection, and will most likely be included as part of either an "At least one assertion must evaluate to true" or "All Assertions must evaluate to true" policy logic folder.

Check Contents

Open the CA API Gateway - Policy Manager and double-click any of the Registered Services requiring email notifications.

Verify the "Send Email Alert" Assertion has been included in the policy at the required decision points within the policy as per organizational requirements.

If it is not present, this is a finding.

Vulnerability Number

V-71453

Documentable

False

Rule Version

CAGW-GW-000770

Severity Override Guidance

Open the CA API Gateway - Policy Manager and double-click any of the Registered Services requiring email notifications.

Verify the "Send Email Alert" Assertion has been included in the policy at the required decision points within the policy as per organizational requirements.

If it is not present, this is a finding.

Check Content Reference

M

Target Key

3049

Comments