DISA_F5_BIG-IP_AFM_v2r1.audit from DISA F5 BIG-IP Advanced Firewall Manager v2r1 STIG

F5BI-AF-000005 - The BIG-IP AFM module must be configured to enforce approved authorizations for controlling the flow of information within the network based on attribute- and content-based inspection of the source, destination, headers, and/or content of the communications traffic.

800-53|AC-4

CAT|II

CCI|CCI-001368

Rule-ID|SV-214498r395865_rule

STIG-ID|F5BI-AF-000005

STIG-Legacy|SV-74347

STIG-Legacy|V-59917

Vuln-ID|V-214498

F5BI-AF-000007 - The BIG-IP AFM module must be configured to restrict or block harmful or suspicious communications traffic by controlling the flow of information between interconnected networks based on attribute- and content-based inspection of the source, destination, headers, and/or content of the communications traffic.

CAT|I

CCI|CCI-001414

Rule-ID|SV-214499r395868_rule

STIG-ID|F5BI-AF-000007

STIG-Legacy|SV-74351

STIG-Legacy|V-59921

Vuln-ID|V-214499

F5BI-AF-000039 - The BIG-IP AFM module must be configured to produce audit records containing information to establish what type of events occurred.

800-53|AU-3

CCI|CCI-000130

Rule-ID|SV-214500r395919_rule

STIG-ID|F5BI-AF-000039

STIG-Legacy|SV-74353

STIG-Legacy|V-59923

Vuln-ID|V-214500

F5BI-AF-000223 - The BIG-IP AFM module must be configured to only allow incoming communications from authorized sources routed to authorized destinations.

800-53|SC-7(11)

CCI|CCI-002403

Rule-ID|SV-214501r831450_rule

STIG-ID|F5BI-AF-000223

STIG-Legacy|SV-74355

STIG-Legacy|V-59925

Vuln-ID|V-214501

F5BI-AF-000229 - The BIG-IP AFM module must be configured to handle invalid inputs in a predictable and documented manner that reflects organizational and system objectives.

Detections

Analytics

DISA F5 BIG-IP Advanced Firewall Manager STIG v2r1

Audit Details

File Details

Audit Changelog

No revisions found