Jun 17, 2024 |
Mar 19, 2024 Miscellaneous- Audit deprecated.
- Metadata updated.
- References updated.
|
Mar 7, 2023 Miscellaneous- Metadata updated.
- References updated.
|
Apr 25, 2022 Miscellaneous- Metadata updated.
- References updated.
|
Jul 30, 2021 Miscellaneous- Metadata updated.
- References updated.
|
Jun 17, 2021 |
Jun 2, 2021 Miscellaneous- Metadata updated.
- Platform check updated.
Added- DISA_F5_BIG-IP_AFM_11_v1r1.audit from DISA F5 BIG-IP Advanced Firewall Manager 11.x v1r1 STIG
- F5BI-AF-000005 - The BIG-IP AFM module must be configured to enforce approved authorizations for controlling the flow of information within the network based on attribute- and content-based inspection of the source, destination, headers, and/or content of the communications traffic.
- F5BI-AF-000007 - The BIG-IP AFM module must be configured to restrict or block harmful or suspicious communications traffic by controlling the flow of information between interconnected networks based on attribute- and content-based inspection of the source, destination, headers, and/or content of the communications traffic.
- F5BI-AF-000039 - The BIG-IP AFM module must be configured to produce audit records containing information to establish what type of events occurred.
- F5BI-AF-000223 - The BIG-IP AFM module must be configured to only allow incoming communications from authorized sources routed to authorized destinations - Active FW Rules
- F5BI-AF-000223 - The BIG-IP AFM module must be configured to only allow incoming communications from authorized sources routed to authorized destinations - Security Policies
- F5BI-AF-000223 - The BIG-IP AFM module must be configured to only allow incoming communications from authorized sources routed to authorized destinations - Virtual Servers
- F5BI-AF-000229 - The BIG-IP AFM module must be configured to handle invalid inputs in a predictable and documented manner that reflects organizational and system objectives.
Removed- DISA_F5_BIG-IP_AFM_11_V1R1.audit from DISA F5 BIG-IP Advanced Firewall Manager 11.x STIG
- F5BI-AF-000005 - The BIG-IP AFM must enforce approved authorizations for controlling the flow of info within the network traffic.
- F5BI-AF-000007 - The BIG-IP AFM must restrict or block harmful or suspicious communications traffic.
- F5BI-AF-000039 - The BIG-IP AFM must produce audit records containing information to establish what type of events occurred.
- F5BI-AF-000223 - The BIG-IP AFM must only allow incoming communications from auth. sources routed to auth. destinations - Active FW Rules
- F5BI-AF-000223 - The BIG-IP AFM must only allow incoming communications from auth. sources routed to auth. destinations - Security Policies
- F5BI-AF-000223 - The BIG-IP AFM must only allow incoming communications from auth. sources routed to auth. destinations - Virtual Servers
- F5BI-AF-000229 - The BIG-IP AFM must handle invalid inputs in a predictable and documented manner.
|
Apr 28, 2021 Miscellaneous- Metadata updated.
- References updated.
|
Sep 29, 2020 |
Apr 15, 2020 Miscellaneous- Metadata updated.
- References updated.
|
