DISA_F5_BIG-IP_LTM_11_v1r3.audit from DISA F5 BIG-IP Local Traffic Manager 11.x STIG

F5BI-LT-000003 - The BIG-IP Core implementation must be configured to enforce approved authorizations for logical access to information and system resources by employing identity-based, role-based, and/or attribute-based security policies.

800-53|AC-6(1)

CAT|II

CCI|CCI-000213

Rule-ID|SV-74687r1_rule

STIG-ID|F5BI-LT-000003

Vuln-ID|V-60257

F5BI-LT-000005 - The BIG-IP Core implementation must be configured to enforce approved authorizations for controlling the flow of information within the network based on attribute- and content-based inspection of the source, destination, headers, and/or content of the communications traffic.

800-53|SC-7(11)

CCI|CCI-001368

Rule-ID|SV-74689r1_rule

STIG-ID|F5BI-LT-000005

Vuln-ID|V-60259

F5BI-LT-000007 - The BIG-IP Core implementation must be configured to restrict or block harmful or suspicious communications traffic by controlling the flow of information between interconnected networks based on attribute- and content-based inspection of the source, destination, headers, and/or content of the communications traffic.

CAT|I

CCI|CCI-001414

Rule-ID|SV-74691r1_rule

STIG-ID|F5BI-LT-000007

Vuln-ID|V-60261

F5BI-LT-000023 - The BIG-IP Core implementation must be configured to display the Standard Mandatory DoD-approved Notice and Consent Banner before granting access to virtual servers.

800-53|AC-8

CAT|III

CCI|CCI-000048

Rule-ID|SV-74693r1_rule

STIG-ID|F5BI-LT-000023

Vuln-ID|V-60263

F5BI-LT-000025 - The BIG-IP Core implementation must be configured to retain the Standard Mandatory DoD-approved Notice and Consent Banner on the screen until users accessing virtual servers acknowledge the usage conditions and take explicit actions to log on for further access.

CCI|CCI-000050

Rule-ID|SV-74695r1_rule

STIG-ID|F5BI-LT-000025

Vuln-ID|V-60265

F5BI-LT-000027 - The BIG-IP Core implementation must be configured to display the Standard Mandatory DoD-approved Notice and Consent Banner before granting access to publicly accessible applications.

CCI|CCI-001384

CCI|CCI-001385

CCI|CCI-001386

CCI|CCI-001387

CCI|CCI-001388

Rule-ID|SV-74697r1_rule

STIG-ID|F5BI-LT-000027

Vuln-ID|V-60267

F5BI-LT-000029 - The BIG-IP Core implementation must be configured to limit the number of concurrent sessions to an organization-defined number for virtual servers - Connection Limit

800-53|AC-10

CCI|CCI-000054

Rule-ID|SV-74699r1_rule

STIG-ID|F5BI-LT-000029

Vuln-ID|V-60269

F5BI-LT-000029 - The BIG-IP Core implementation must be configured to limit the number of concurrent sessions to an organization-defined number for virtual servers - Connection Limit Rate

F5BI-LT-000031 - The BIG-IP Core implementation must be configured to monitor inbound traffic for remote access policy compliance when accepting connections to virtual servers.

800-53|SI-4(4)

CCI|CCI-000067

Rule-ID|SV-74701r1_rule

STIG-ID|F5BI-LT-000031

Vuln-ID|V-60271

F5BI-LT-000033 - The BIG-IP Core implementation must be configured to use encryption services that implement NIST SP 800-52 Revision 1 compliant cryptography to protect the confidentiality of connections to virtual servers.

800-53|SC-13

CCI|CCI-000068

Rule-ID|SV-74703r1_rule

STIG-ID|F5BI-LT-000033

Vuln-ID|V-60273

F5BI-LT-000035 - The BIG-IP Core implementation must be configured to comply with the required TLS settings in NIST SP 800-52 Revision 1 for TLS services to virtual servers.

Rule-ID|SV-74705r1_rule

STIG-ID|F5BI-LT-000035

Vuln-ID|V-60275

F5BI-LT-000037 - The BIG-IP Core implementation must be configured to use NIST SP 800-52 Revision 1 compliant cryptography to protect the integrity of remote access sessions to virtual servers.

CCI|CCI-001453

Rule-ID|SV-74707r1_rule

STIG-ID|F5BI-LT-000037

Vuln-ID|V-60277

F5BI-LT-000055 - The BIG-IP Core implementation must be configured to protect audit information from unauthorized read access.

CCI|CCI-000162

Rule-ID|SV-74709r1_rule

STIG-ID|F5BI-LT-000055

Vuln-ID|V-60279

F5BI-LT-000057 - The BIG-IP Core implementation must be configured to protect audit information from unauthorized modification.

CCI|CCI-000163

Rule-ID|SV-74711r2_rule

STIG-ID|F5BI-LT-000057

Vuln-ID|V-60281

F5BI-LT-000059 - The BIG-IP Core implementation must be configured to protect audit information from unauthorized deletion.

CCI|CCI-000164

Rule-ID|SV-74713r2_rule

STIG-ID|F5BI-LT-000059

Vuln-ID|V-60283

F5BI-LT-000061 - The BIG-IP Core implementation must be configured to protect audit tools from unauthorized access.

CCI|CCI-001493

Rule-ID|SV-74715r2_rule

STIG-ID|F5BI-LT-000061

Vuln-ID|V-60285

F5BI-LT-000063 - The BIG-IP Core implementation must be configured to protect audit tools from unauthorized modification.

CCI|CCI-001494

Rule-ID|SV-74717r2_rule

STIG-ID|F5BI-LT-000063

Vuln-ID|V-60287

F5BI-LT-000065 - The BIG-IP Core implementation must be configured to protect audit tools from unauthorized deletion.

CCI|CCI-001495

Rule-ID|SV-74719r2_rule

STIG-ID|F5BI-LT-000065

Vuln-ID|V-60289

F5BI-LT-000067 - The BIG-IP Core implementation must be configured so that only functions, ports, protocols, and/or services that are documented for the server/application for which the virtual servers are providing connectivity.

800-53|CM-7

CCI|CCI-000381

Rule-ID|SV-74721r1_rule

STIG-ID|F5BI-LT-000067

Vuln-ID|V-60291

F5BI-LT-000069 - The BIG-IP Core implementation must be configured to remove or disable any functions, ports, protocols, and/or services that are not documented as required.

Rule-ID|SV-74723r1_rule

STIG-ID|F5BI-LT-000069

Vuln-ID|V-60293

F5BI-LT-000071 - The BIG-IP Core implementation must be configured to prohibit or restrict the use of functions, ports, protocols, and/or services, as defined in the Ports, Protocol, and Service Management (PPSM) Category Assurance List (CAL) and vulnerability assessments.

CCI|CCI-000382

Rule-ID|SV-74725r1_rule

STIG-ID|F5BI-LT-000071

Vuln-ID|V-60295

F5BI-LT-000073 - The BIG-IP Core implementation must be configured to uniquely identify and authenticate organizational users (or processes acting on behalf of organizational users) when connecting to virtual servers.

800-53|IA-2

CCI|CCI-000764

Rule-ID|SV-74727r1_rule

STIG-ID|F5BI-LT-000073

Vuln-ID|V-60297

F5BI-LT-000075 - The BIG-IP Core implementation must be configured with a pre-established trust relationship and mechanisms with appropriate authorities (e.g., Active Directory or authentication, authorization, and accounting (AAA) server) that validate user account access authorizations and privileges when providing access control to virtual servers.

Rule-ID|SV-74729r1_rule

STIG-ID|F5BI-LT-000075

Vuln-ID|V-60299

F5BI-LT-000077 - The BIG-IP Core implementation providing user authentication intermediary services must restrict user authentication traffic to specific authentication server(s) when providing access control to virtual servers.

Rule-ID|SV-74731r1_rule

STIG-ID|F5BI-LT-000077

Vuln-ID|V-60301

F5BI-LT-000079 - The BIG-IP Core implementation providing user authentication intermediary services must use multifactor authentication for network access to non-privileged accounts when granting access to virtual servers.

800-53|IA-2(11)

CCI|CCI-000766

Rule-ID|SV-74733r1_rule

STIG-ID|F5BI-LT-000079

Vuln-ID|V-60303

F5BI-LT-000083 - The BIG-IP Core implementation must be configured to validate certificates used for TLS functions for connections to virtual servers by constructing a certification path (which includes status information) to an accepted trust anchor.

800-53|SC-17

CCI|CCI-000185

Rule-ID|SV-74735r1_rule

STIG-ID|F5BI-LT-000083

Vuln-ID|V-60305

F5BI-LT-000085 - The BIG-IP Core implementation providing PKI-based, user authentication intermediary services must be configured to map the authenticated identity to the user account for PKI-based authentication to virtual servers.

800-53|IA-5(2)

CCI|CCI-000187

Rule-ID|SV-74737r1_rule

STIG-ID|F5BI-LT-000085

Vuln-ID|V-60307

F5BI-LT-000087 - The BIG-IP Core implementation must be configured to uniquely identify and authenticate non-organizational users (or processes acting on behalf of non-organizational users) when connecting to virtual servers.

800-53|IA-8

CCI|CCI-000804

Rule-ID|SV-74739r1_rule

STIG-ID|F5BI-LT-000087

Vuln-ID|V-60309

F5BI-LT-000093 - The BIG-IP Core implementation must terminate all network connections associated with a communications session at the end of the session, or as follows: for in-band management sessions (privileged sessions), the session must be terminated after 10 minutes of inactivity; and for user sessions (non-privileged session), the session must be terminated after 15 minutes of inactivity.

800-53|AC-12

CCI|CCI-001133

Rule-ID|SV-74741r2_rule

STIG-ID|F5BI-LT-000093

Vuln-ID|V-60311

F5BI-LT-000097 - The BIG-IP Core implementation must be configured to protect the authenticity of communications sessions.

CCI|CCI-001184

Rule-ID|SV-74743r1_rule

STIG-ID|F5BI-LT-000097

Vuln-ID|V-60313

F5BI-LT-000139 - The BIG-IP Core implementation must be configured to activate a session lock to conceal information previously visible on the display for connections to virtual servers.

800-53|AC-11(1)

CCI|CCI-000060

Rule-ID|SV-74745r1_rule

STIG-ID|F5BI-LT-000139

Vuln-ID|V-60315

F5BI-LT-000141 - The BIG-IP Core implementation must be configured to initiate a session lock after a 15-minute period of inactivity when users are connected to virtual servers.

CCI|CCI-000057

Rule-ID|SV-74747r1_rule

STIG-ID|F5BI-LT-000141

Vuln-ID|V-60317

F5BI-LT-000143 - The BIG-IP Core implementation providing user access control intermediary services must provide the capability for users to directly initiate a session lock.

CCI|CCI-000058

Rule-ID|SV-74749r1_rule

STIG-ID|F5BI-LT-000143

Vuln-ID|V-60319

F5BI-LT-000147 - The BIG-IP Core implementation must automatically terminate a user session for a user connected to virtual servers when organization-defined conditions or trigger events occur that require a session disconnect.

CCI|CCI-002361

Rule-ID|SV-74751r1_rule

STIG-ID|F5BI-LT-000147

Vuln-ID|V-60321

F5BI-LT-000151 - The BIG-IP Core must display an explicit logoff message to users indicating the reliable termination of authenticated communications sessions when providing access to virtual servers.

800-53|AC-12(1)

CCI|CCI-002364

Rule-ID|SV-74753r1_rule

STIG-ID|F5BI-LT-000151

Vuln-ID|V-60323

F5BI-LT-000153 - The BIG-IP Core implementation providing intermediary services for remote access communications traffic must control remote access methods to virtual servers.

800-53|AC-17

CCI|CCI-002314

Rule-ID|SV-74755r1_rule

STIG-ID|F5BI-LT-000153

Vuln-ID|V-60325

F5BI-LT-000157 - To protect against data mining, the BIG-IP Core implementation must be configured to prevent code injection attacks from being launched against data storage objects, including, at a minimum, databases, database records, queries, and fields when providing content filtering to virtual servers.

CCI|CCI-002346

Rule-ID|SV-74757r1_rule

STIG-ID|F5BI-LT-000157

Vuln-ID|V-60327

Detections

Analytics

DISA F5 BIG-IP Local Traffic Manager 11.x STIG v1r3

Warning! Audit Deprecated

Audit Details

Audit Changelog

Revision 1.4

Miscellaneous

Revision 1.3

Miscellaneous

Revision 1.2

Miscellaneous

Revision 1.1

Miscellaneous


Revision 1.4 Jun 2, 2021 Miscellaneous Audit deprecated. Metadata updated. References updated.
Revision 1.3 Apr 28, 2021 Miscellaneous Metadata updated. References updated.
Revision 1.2 Sep 29, 2020 Miscellaneous References updated.
Revision 1.1 Apr 15, 2020 Miscellaneous Metadata updated. References updated.