F5BI-AS-000109 - The BIG-IP ASM module must be configured to update malicious code protection mechanisms and signature definitions when providing content filtering to virtual servers for whenever new releases are available in accordance with organizational configuration management policy and procedures.

Information

Malicious code protection mechanisms include, but are not limited to, anti-virus and malware detection software. In order to minimize any potential negative impact to the organization caused by malicious code, malicious code must be identified and eradicated. Malicious code includes viruses, worms, Trojan horses, and Spyware.

This requirement is limited to ALGs, web content filters, and packet inspection firewalls that perform malicious code detection as part of their functionality.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

If the BIG-IP Core performs content filtering as part of the traffic management functionality, configure the BIG-IP ASM module to update malicious code protection mechanisms and signature definitions whenever new releases are available in accordance with organizational configuration management policies and procedures.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_F5_BIG-IP_11-x_Y20M10_STIG.zip

Item Details

References: CAT|II, CCI|CCI-001240, Rule-ID|SV-74501r1_rule, STIG-ID|F5BI-AS-000109, Vuln-ID|V-60071

Plugin: F5

Control ID: 8d1f0b21e155e74adb9b504d0e0a8bec1fe70113fe649ace7b64fb70d762eb79