F5BI-DM-000017 - The BIG-IP appliance must automatically disable accounts after a 35-day period of account inactivity.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version


Since the accounts in the network device are privileged or system-level accounts, account management is vital to the security of the network device. Inactive accounts could be reactivated or compromised by unauthorized users, allowing exploitation of vulnerabilities and undetected access to the network device.

This control does not include emergency administration accounts, which are meant for access to the network device components in case of network failure.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.


Configure the BIG-IP appliance to use an approved remote authentication server that automatically disables accounts after 35 days of inactivity.

See Also


Item Details

References: CAT|II, CCI|CCI-000017, CCI|CCI-000366, Rule-ID|SV-228980r879887_rule, STIG-ID|F5BI-DM-000017, STIG-Legacy|SV-74529, STIG-Legacy|V-60099, Vuln-ID|V-228980

Plugin: F5

Control ID: 09748aa64f7791c7034b532fad3d88bf37f7793ac1c7d7a910baafa673427074