DISA_F5_BIG-IP_Device_Management_11_v2r1.audit from DISA F5 BIG-IP Device Management 11.x v2r1 STIG

F5BI-DM-000003 - The BIG-IP appliance must limit the number of concurrent sessions to the Configuration Utility to 10 or an organization-defined number - 1 for each administrator account and/or administrator account type.

800-53|AC-10

CAT|II

CCI|CCI-000054

Rule-ID|SV-217381r557520_rule

STIG-ID|F5BI-DM-000003

STIG-Legacy|SV-74521

STIG-Legacy|V-60091

Vuln-ID|V-217381

F5BI-DM-000007 - The BIG-IP appliance must be configured to initiate a session lock after a 10-minute period of inactivity.

800-53|AC-12

CCI|CCI-000057

Rule-ID|SV-217382r557520_rule

STIG-ID|F5BI-DM-000007

STIG-Legacy|SV-74523

STIG-Legacy|V-60093

Vuln-ID|V-217382

F5BI-DM-000013 - The BIG-IP appliance must provide automated support for account management functions.

800-53|IA-2

CCI|CCI-000015

CCI|CCI-000366

Rule-ID|SV-228978r557520_rule

STIG-ID|F5BI-DM-000013

STIG-Legacy|SV-74525

STIG-Legacy|V-60095

Vuln-ID|V-228978

F5BI-DM-000015 - The BIG-IP appliance must automatically remove or disable temporary user accounts after 72 hours.

CCI|CCI-000016

Rule-ID|SV-228979r557520_rule

STIG-ID|F5BI-DM-000015

STIG-Legacy|SV-74527

STIG-Legacy|V-60097

Vuln-ID|V-228979

F5BI-DM-000017 - The BIG-IP appliance must automatically disable accounts after a 35-day period of account inactivity.

CCI|CCI-000017

Rule-ID|SV-228980r557520_rule

STIG-ID|F5BI-DM-000017

STIG-Legacy|SV-74529

STIG-Legacy|V-60099

Vuln-ID|V-228980

F5BI-DM-000019 - The BIG-IP appliance must automatically audit account creation.

CCI|CCI-000018

Rule-ID|SV-217383r557520_rule

STIG-ID|F5BI-DM-000019

STIG-Legacy|SV-74533

STIG-Legacy|V-60103

Vuln-ID|V-217383

F5BI-DM-000021 - The BIG-IP appliance must automatically audit account modification.

CCI|CCI-001403

Rule-ID|SV-217384r557520_rule

STIG-ID|F5BI-DM-000021

STIG-Legacy|SV-74535

STIG-Legacy|V-60105

Vuln-ID|V-217384

F5BI-DM-000023 - The BIG-IP appliance must automatically audit account-disabling actions.

CCI|CCI-001404

Rule-ID|SV-217385r557520_rule

STIG-ID|F5BI-DM-000023

STIG-Legacy|SV-74537

STIG-Legacy|V-60107

Vuln-ID|V-217385

F5BI-DM-000025 - The BIG-IP appliance must automatically audit account removal actions.

CCI|CCI-001405

Rule-ID|SV-217386r557520_rule

STIG-ID|F5BI-DM-000025

STIG-Legacy|SV-74539

STIG-Legacy|V-60109

Vuln-ID|V-217386

F5BI-DM-000027 - The BIG-IP appliance must be configured to enforce the assigned privilege level for each administrator and authorizations for access to all commands relative to the privilege level in accordance with applicable policy for the device.

CAT|I

CCI|CCI-000213

Rule-ID|SV-217387r557520_rule

STIG-ID|F5BI-DM-000027

STIG-Legacy|SV-74541

STIG-Legacy|V-60111

Vuln-ID|V-217387

F5BI-DM-000031 - The BIG-IP appliance must be configured to enforce the limit of three consecutive invalid logon attempts by a user during a 15-minute time period.

CCI|CCI-000044

Rule-ID|SV-217388r557520_rule

STIG-ID|F5BI-DM-000031

STIG-Legacy|SV-74543

STIG-Legacy|V-60113

Vuln-ID|V-217388

F5BI-DM-000033 - The BIG-IP appliance must be configured to display the Standard Mandatory DoD Notice and Consent Banner before granting access to the device - Banner Enabled

800-53|AC-8

CAT|III

CCI|CCI-000048

Rule-ID|SV-217389r557520_rule

STIG-ID|F5BI-DM-000033

STIG-Legacy|SV-74671

STIG-Legacy|V-60241

Vuln-ID|V-217389

F5BI-DM-000033 - The BIG-IP appliance must be configured to display the Standard Mandatory DoD Notice and Consent Banner before granting access to the device - Banner Text

F5BI-DM-000037 - Upon successful logon, the BIG-IP appliance must be configured to notify the administrator of the date and time of the last logon.

CCI|CCI-000052

Rule-ID|SV-228981r557520_rule

STIG-ID|F5BI-DM-000037

STIG-Legacy|SV-74545

STIG-Legacy|V-60115

Vuln-ID|V-228981

F5BI-DM-000039 - Upon successful logon, the BIG-IP appliance must be configured to notify the administrator of the number of unsuccessful logon attempts since the last successful logon.

CCI|CCI-000053

Rule-ID|SV-228982r557520_rule

STIG-ID|F5BI-DM-000039

STIG-Legacy|SV-74547

STIG-Legacy|V-60117

Vuln-ID|V-228982

F5BI-DM-000043 - The BIG-IP appliance must be configured to protect against an individual (or process acting on behalf of an individual) falsely denying having performed system configuration changes.

CCI|CCI-000166

Rule-ID|SV-217390r557520_rule

STIG-ID|F5BI-DM-000043

STIG-Legacy|SV-74551

STIG-Legacy|V-60121

Vuln-ID|V-217390

F5BI-DM-000067 - The BIG-IP appliance must be configured to alert the ISSO and SA (at a minimum) in the event of an audit processing failure - at a minimum in the event of an audit processing failure.

800-53|SI-4(5)

CCI|CCI-000139

Rule-ID|SV-228983r557520_rule

STIG-ID|F5BI-DM-000067

STIG-Legacy|SV-74553

STIG-Legacy|V-60123

Vuln-ID|V-228983

F5BI-DM-000073 - The BIG-IP appliance must be configured to protect audit information from any type of unauthorized read access.

CCI|CCI-000162

Rule-ID|SV-228985r557520_rule

STIG-ID|F5BI-DM-000073

STIG-Legacy|SV-74557

STIG-Legacy|V-60127

Vuln-ID|V-228985

F5BI-DM-000075 - The BIG-IP appliance must be configured to protect audit information from unauthorized modification.

CCI|CCI-000163

Rule-ID|SV-217392r557520_rule

STIG-ID|F5BI-DM-000075

STIG-Legacy|SV-74559

STIG-Legacy|V-60129

Vuln-ID|V-217392

F5BI-DM-000077 - The BIG-IP appliance must be configured to protect audit information from unauthorized deletion.

CCI|CCI-000164

Rule-ID|SV-217393r557520_rule

STIG-ID|F5BI-DM-000077

STIG-Legacy|SV-74561

STIG-Legacy|V-60131

Vuln-ID|V-217393

F5BI-DM-000079 - The BIG-IP appliance must be configured to protect audit tools from unauthorized access.

CCI|CCI-001493

Rule-ID|SV-217394r557520_rule

STIG-ID|F5BI-DM-000079

STIG-Legacy|SV-74563

STIG-Legacy|V-60133

Vuln-ID|V-217394

F5BI-DM-000087 - The BIG-IP appliance must be configured to use NIAP evaluated cryptographic mechanisms to protect the integrity of audit information at rest.

800-53|AU-9(3)

CCI|CCI-001350

Rule-ID|SV-228987r557520_rule

STIG-ID|F5BI-DM-000087

STIG-Legacy|SV-74567

STIG-Legacy|V-60137

Vuln-ID|V-228987

F5BI-DM-000093 - The BIG-IP appliance must be configured to prohibit the use of all unnecessary and/or nonsecure functions, ports, protocols, and/or services, as defined in the Ports, Protocols, and Services Management (PPSM) Category Assurance List (CAL) and vulnerability assessments.

CCI|CCI-000382

Rule-ID|SV-217396r557520_rule

STIG-ID|F5BI-DM-000093

STIG-Legacy|SV-74569

STIG-Legacy|V-60139

Vuln-ID|V-217396

F5BI-DM-000095 - The BIG-IP appliance must be configured to uniquely identify and authenticate organizational administrators (or processes acting on behalf of organizational administrators).

CCI|CCI-000764

Rule-ID|SV-228988r557520_rule

STIG-ID|F5BI-DM-000095

STIG-Legacy|SV-74573

STIG-Legacy|V-60143

Vuln-ID|V-228988

F5BI-DM-000101 - The BIG-IP appliance must be configured to ensure administrators are authenticated with an individual authenticator prior to using a group authenticator.

800-53|IA-2(5)

CCI|CCI-000770

Rule-ID|SV-217397r557520_rule

STIG-ID|F5BI-DM-000101

STIG-Legacy|SV-74575

STIG-Legacy|V-60145

Vuln-ID|V-217397

F5BI-DM-000107 - The BIG-IP appliance must be configured to enforce a minimum 15-character password length.

CCI|CCI-000205

Rule-ID|SV-217398r557520_rule

STIG-ID|F5BI-DM-000107

STIG-Legacy|SV-74577

STIG-Legacy|V-60147

Vuln-ID|V-217398

F5BI-DM-000109 - The BIG-IP appliance must be configured to prohibit password reuse for a minimum of five generations.

CCI|CCI-000200

Rule-ID|SV-228989r557520_rule

STIG-ID|F5BI-DM-000109

STIG-Legacy|SV-74579

STIG-Legacy|V-60149

Vuln-ID|V-228989

F5BI-DM-000111 - If multifactor authentication is not supported and passwords must be used, the BIG-IP appliance must enforce password complexity by requiring that at least one upper-case character be used.

Detections

Analytics

DISA F5 BIG-IP Device Management 11.x STIG v2r1

Warning! Audit Deprecated

Audit Details

Audit Changelog

Revision 1.6

Miscellaneous

Revision 1.5

Miscellaneous

Revision 1.4

Miscellaneous

Revision 1.3

Miscellaneous

Revision 1.2

Miscellaneous

Revision 1.1

Miscellaneous


Revision 1.6 Jan 24, 2024 Miscellaneous Audit deprecated. Metadata updated. References updated.
Revision 1.5 Mar 7, 2023 Miscellaneous Metadata updated. References updated. Variables updated.
Revision 1.4 Dec 7, 2022 Miscellaneous Metadata updated.
Revision 1.3 Apr 25, 2022 Miscellaneous Metadata updated. References updated.
Revision 1.2 Jul 30, 2021 Miscellaneous Metadata updated. References updated.
Revision 1.1 Jun 17, 2021 Miscellaneous Metadata updated. References updated.