DISA F5 BIG-IP Advanced Firewall Manager STIG v2r2

Name: DISA F5 BIG-IP Advanced Firewall Manager STIG v2r2

Updated: 4/30/2025

Authority: DISA STIG

Plugin: F5

Revision: 1.0

Estimated Item Count: 7

Filename: DISA_F5_BIG-IP_AFM_v2r2.audit

Size: 20.8 kB

MD5: ccd3645d5ed32b74ca5276462e6711d7

SHA256: 946caf0385444b6742faeabfb03c691ea0030c56e9c124788e072705a00adf8a

Description	Categories
DISA_F5_BIG-IP_AFM_v2r2.audit from DISA F5 BIG-IP Advanced Firewall Manager v2r2 STIG
F5BI-AF-000005 - The BIG-IP AFM module must be configured to enforce approved authorizations for controlling the flow of information within the network based on attribute- and content-based inspection of the source, destination, headers, and/or content of the communications traffic.	ACCESS CONTROL
F5BI-AF-000007 - The BIG-IP AFM module must be configured to restrict or block harmful or suspicious communications traffic by controlling the flow of information between interconnected networks based on attribute- and content-based inspection of the source, destination, headers, and/or content of the communications traffic.	ACCESS CONTROL
F5BI-AF-000039 - The BIG-IP AFM module must be configured to produce audit records containing information to establish what type of events occurred.	AUDIT AND ACCOUNTABILITY
F5BI-AF-000223 - The BIG-IP AFM module must be configured to only allow incoming communications from authorized sources routed to authorized destinations.	SYSTEM AND COMMUNICATIONS PROTECTION
F5BI-AF-000229 - The BIG-IP AFM module must be configured to handle invalid inputs in a predictable and documented manner that reflects organizational and system objectives.	SYSTEM AND INFORMATION INTEGRITY
F5BI-AF-999999 - The version of F5 BIG-IP must be a supported version.	SYSTEM AND INFORMATION INTEGRITY