DISA_F5_BIG-IP_Device_Management_11_v2r2.audit from DISA F5 BIG-IP Device Management 11.x v2r2 STIG

F5BI-DM-000003 - The BIG-IP appliance must limit the number of concurrent sessions to the Configuration Utility to 10 or an organization-defined number - 1 for each administrator account and/or administrator account type.

CAT|II

CCI|CCI-000054

Rule-ID|SV-217381r879511_rule

STIG-ID|F5BI-DM-000003

STIG-Legacy|SV-74521

STIG-Legacy|V-60091

Vuln-ID|V-217381

F5BI-DM-000013 - The BIG-IP appliance must provide automated support for account management functions.

CCI|CCI-000015

CCI|CCI-000366

Rule-ID|SV-228978r879887_rule

STIG-ID|F5BI-DM-000013

STIG-Legacy|SV-74525

STIG-Legacy|V-60095

Vuln-ID|V-228978

F5BI-DM-000015 - The BIG-IP appliance must automatically remove or disable temporary user accounts after 72 hours.

CCI|CCI-000016

Rule-ID|SV-228979r879887_rule

STIG-ID|F5BI-DM-000015

STIG-Legacy|SV-74527

STIG-Legacy|V-60097

Vuln-ID|V-228979

F5BI-DM-000017 - The BIG-IP appliance must automatically disable accounts after a 35-day period of account inactivity.

CCI|CCI-000017

Rule-ID|SV-228980r879887_rule

STIG-ID|F5BI-DM-000017

STIG-Legacy|SV-74529

STIG-Legacy|V-60099

Vuln-ID|V-228980

F5BI-DM-000019 - The BIG-IP appliance must automatically audit account creation.

CCI|CCI-000018

Rule-ID|SV-217383r879525_rule

STIG-ID|F5BI-DM-000019

STIG-Legacy|SV-74533

STIG-Legacy|V-60103

Vuln-ID|V-217383

F5BI-DM-000021 - The BIG-IP appliance must automatically audit account modification.

CCI|CCI-001403

Rule-ID|SV-217384r879526_rule

STIG-ID|F5BI-DM-000021

STIG-Legacy|SV-74535

STIG-Legacy|V-60105

Vuln-ID|V-217384

F5BI-DM-000023 - The BIG-IP appliance must automatically audit account-disabling actions.

CCI|CCI-001404

Rule-ID|SV-217385r879527_rule

STIG-ID|F5BI-DM-000023

STIG-Legacy|SV-74537

STIG-Legacy|V-60107

Vuln-ID|V-217385

F5BI-DM-000025 - The BIG-IP appliance must automatically audit account removal actions.

CCI|CCI-001405

Rule-ID|SV-217386r879528_rule

STIG-ID|F5BI-DM-000025

STIG-Legacy|SV-74539

STIG-Legacy|V-60109

Vuln-ID|V-217386

F5BI-DM-000027 - The BIG-IP appliance must be configured to enforce the assigned privilege level for each administrator and authorizations for access to all commands relative to the privilege level in accordance with applicable policy for the device.

CAT|I

CCI|CCI-000213

Rule-ID|SV-217387r879530_rule

STIG-ID|F5BI-DM-000027

STIG-Legacy|SV-74541

STIG-Legacy|V-60111

Vuln-ID|V-217387

F5BI-DM-000031 - The BIG-IP appliance must be configured to enforce the limit of three consecutive invalid logon attempts by a user during a 15-minute time period.

CCI|CCI-000044

Rule-ID|SV-217388r879546_rule

STIG-ID|F5BI-DM-000031

STIG-Legacy|SV-74543

STIG-Legacy|V-60113

Vuln-ID|V-217388

F5BI-DM-000033 - The BIG-IP appliance must be configured to display the Standard Mandatory DoD Notice and Consent Banner before granting access to the device - Banner Enabled

CAT|III

CCI|CCI-000048

Rule-ID|SV-217389r879547_rule

STIG-ID|F5BI-DM-000033

STIG-Legacy|SV-74671

STIG-Legacy|V-60241

Vuln-ID|V-217389

F5BI-DM-000033 - The BIG-IP appliance must be configured to display the Standard Mandatory DoD Notice and Consent Banner before granting access to the device - Banner Text

F5BI-DM-000037 - Upon successful logon, the BIG-IP appliance must be configured to notify the administrator of the date and time of the last logon.

CCI|CCI-000052

Rule-ID|SV-228981r879887_rule

STIG-ID|F5BI-DM-000037

STIG-Legacy|SV-74545

STIG-Legacy|V-60115

Vuln-ID|V-228981

F5BI-DM-000039 - Upon successful logon, the BIG-IP appliance must be configured to notify the administrator of the number of unsuccessful logon attempts since the last successful logon.

CCI|CCI-000053

Rule-ID|SV-228982r879887_rule

STIG-ID|F5BI-DM-000039

STIG-Legacy|SV-74547

STIG-Legacy|V-60117

Vuln-ID|V-228982

F5BI-DM-000043 - The BIG-IP appliance must be configured to protect against an individual (or process acting on behalf of an individual) falsely denying having performed system configuration changes.

CCI|CCI-000166

Rule-ID|SV-217390r879554_rule

STIG-ID|F5BI-DM-000043

STIG-Legacy|SV-74551

STIG-Legacy|V-60121

Vuln-ID|V-217390

F5BI-DM-000067 - The BIG-IP appliance must be configured to alert the ISSO and SA (at a minimum) in the event of an audit processing failure - at a minimum in the event of an audit processing failure.

CCI|CCI-000139

Rule-ID|SV-228983r879887_rule

STIG-ID|F5BI-DM-000067

STIG-Legacy|SV-74553

STIG-Legacy|V-60123

Vuln-ID|V-228983

F5BI-DM-000073 - The BIG-IP appliance must be configured to protect audit information from any type of unauthorized read access.

CCI|CCI-000162

Rule-ID|SV-228985r879887_rule

STIG-ID|F5BI-DM-000073

STIG-Legacy|SV-74557

STIG-Legacy|V-60127

Vuln-ID|V-228985

F5BI-DM-000075 - The BIG-IP appliance must be configured to protect audit information from unauthorized modification.

CCI|CCI-000163

Rule-ID|SV-217392r879577_rule

STIG-ID|F5BI-DM-000075

STIG-Legacy|SV-74559

STIG-Legacy|V-60129

Vuln-ID|V-217392

F5BI-DM-000077 - The BIG-IP appliance must be configured to protect audit information from unauthorized deletion.

CCI|CCI-000164

Rule-ID|SV-217393r879578_rule

STIG-ID|F5BI-DM-000077

STIG-Legacy|SV-74561

STIG-Legacy|V-60131

Vuln-ID|V-217393

F5BI-DM-000079 - The BIG-IP appliance must be configured to protect audit tools from unauthorized access.

CCI|CCI-001493

Rule-ID|SV-217394r879579_rule

STIG-ID|F5BI-DM-000079

STIG-Legacy|SV-74563

STIG-Legacy|V-60133

Vuln-ID|V-217394

F5BI-DM-000087 - The BIG-IP appliance must be configured to use NIAP evaluated cryptographic mechanisms to protect the integrity of audit information at rest.

CCI|CCI-001350

Rule-ID|SV-228987r879887_rule

STIG-ID|F5BI-DM-000087

STIG-Legacy|SV-74567

STIG-Legacy|V-60137

Vuln-ID|V-228987

F5BI-DM-000093 - The BIG-IP appliance must be configured to prohibit the use of all unnecessary and/or nonsecure functions, ports, protocols, and/or services, as defined in the Ports, Protocols, and Services Management (PPSM) Category Assurance List (CAL) and vulnerability assessments.

CCI|CCI-000382

Rule-ID|SV-217396r879588_rule

STIG-ID|F5BI-DM-000093

STIG-Legacy|SV-74569

STIG-Legacy|V-60139

Vuln-ID|V-217396

F5BI-DM-000095 - The BIG-IP appliance must be configured to uniquely identify and authenticate organizational administrators (or processes acting on behalf of organizational administrators).

CCI|CCI-000764

Rule-ID|SV-228988r879887_rule

STIG-ID|F5BI-DM-000095

STIG-Legacy|SV-74573

STIG-Legacy|V-60143

Vuln-ID|V-228988

F5BI-DM-000101 - The BIG-IP appliance must be configured to ensure administrators are authenticated with an individual authenticator prior to using a group authenticator.

CCI|CCI-000770

Rule-ID|SV-217397r879594_rule

STIG-ID|F5BI-DM-000101

STIG-Legacy|SV-74575

STIG-Legacy|V-60145

Vuln-ID|V-217397

F5BI-DM-000107 - The BIG-IP appliance must be configured to enforce a minimum 15-character password length.

CCI|CCI-000205

Rule-ID|SV-217398r879601_rule

STIG-ID|F5BI-DM-000107

STIG-Legacy|SV-74577

STIG-Legacy|V-60147

Vuln-ID|V-217398

F5BI-DM-000109 - The BIG-IP appliance must be configured to prohibit password reuse for a minimum of five generations.

CCI|CCI-000200

Rule-ID|SV-228989r879887_rule

STIG-ID|F5BI-DM-000109

STIG-Legacy|SV-74579

STIG-Legacy|V-60149

Vuln-ID|V-228989

F5BI-DM-000111 - If multifactor authentication is not supported and passwords must be used, the BIG-IP appliance must enforce password complexity by requiring that at least one upper-case character be used.

CCI|CCI-000192

Rule-ID|SV-217399r879603_rule

STIG-ID|F5BI-DM-000111

STIG-Legacy|SV-74679

STIG-Legacy|V-60249

Vuln-ID|V-217399

F5BI-DM-000113 - If multifactor authentication is not supported and passwords must be used, the BIG-IP appliance must enforce password complexity by requiring that at least one lower-case character be used.

CCI|CCI-000193

Rule-ID|SV-217400r879604_rule

STIG-ID|F5BI-DM-000113

STIG-Legacy|SV-74581

STIG-Legacy|V-60151

Vuln-ID|V-217400

F5BI-DM-000115 - If multifactor authentication is not supported and passwords must be used, the BIG-IP appliance must enforce password complexity by requiring that at least one numeric character be used.

Detections

Analytics

DISA F5 BIG-IP Device Management 11.x STIG v2r2

Warning! Audit Deprecated

Audit Details

File Details

Audit Changelog

Revision 1.1

Miscellaneous