V2R4 changes
Application Layer Gateway Security Requirements Guide V2R4 (2026-07-01) replaced V2R3 (2025-10-28): 2 checks updated. It has 160 checks, against 160 in V2R3.
V2R4 checklistV2R3 checklist Compare V2R3 and V2R4 in STIG Compare
- 0 added
- 0 removed
- 2 updated
Updated fields: Check text 1Fix text 1Title 1Severity 1
Updated in V2R4 (2)
V-204934CAT IIThe ALG must send an alert to, at a minimum, the information system security officer (ISSO) and system administrator (SA) when an audit processing failure occurs.Title, Check text, Fix text
Title
The ALG must send an alert to, at a minimum, the information system security officer (ISSO) and SCAsystem administrator (SA) when an audit processing failure occurs.
Check text
Verify the ALG sends an alert to, at a minimum, the ISSO and SCASA when an audit processing failure occurs.
If the ALG does not send an alert to, at a minimum, the ISSO and SCASA when an audit processing failure occurs, this is a finding.
Fix text
Configure the ALG to send an alert to, at a minimum, the ISSO and SCA when an audit processing failure occurs.
V-205026CAT IThe ALG providing user authentication intermediary services must transmit only encrypted representations of passwords.Severity
How these changes are found
Checks are matched across the two releases by V-number. A check counts as updated when DISA gave it a new rule revision (the r number in its SV-…_rule id) and its title, severity, check text, fix text, discussion, CCIs or other fields changed — the same comparison STIG Compare makes. Added checks are new V-numbers; removed checks are V-numbers V2R4 no longer has.
Comparing other releases, or this one against an older release? Pick any two in STIG Compare.