Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
Symantec ProxySG must be configured to remove or disable unrelated or unneeded application proxy services.
Description
Discussion Text
Unrelated or unneeded proxy services increase the attack vector and add excessive complexity to the securing of the ALG. Multiple application proxies can be installed on many ALGs. However, proxy types must be limited to related functions. At a minimum, the web and email gateway represent different security domains/trust levels. Organizations should also consider separation of gateways that service the DMZ and the trusted network.
Possible services that may be configured on the ProxySG:
AOL IM
DNS Proxy
FTP
FTPS
HTTPS
HTTPS Reverse Proxy
MMS
MSN IM
RMTP
RTSP
SOCKS
TLS
TCP Tunnel
TELNET
Yahoo IM
Possible services that may be configured on the ProxySG:
AOL IM
DNS Proxy
FTP
FTPS
HTTPS
HTTPS Reverse Proxy
MMS
MSN IM
RMTP
RTSP
SOCKS
TLS
TCP Tunnel
TELNET
Yahoo IM
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.