F5BI-DM-000163 - The BIG-IP appliance must be configured to restrict a consistent inbound IP for the entire management session - Restrict IP

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version


This setting helps to limit the effects of denial-of-service attacks by employing antisession hijacking security safeguards. Session hijacking, also called cookie hijacking, is the exploitation of a valid computer session to gain unauthorized access to an application. The attacker steals (or hijacks) the cookies from a valid user and attempts to use them for authentication.


Configure the BIG-IP appliance to restrict a consistent inbound IP for the entire session for management sessions.

Set 'Restrict A Consistent Inbound IP For The Entire Session' to enabled.

See Also


Item Details

References: CAT|II, CCI|CCI-002385, Rule-ID|SV-259332r939163_rule, STIG-ID|F5BI-DM-000163, STIG-Legacy|SV-74615, STIG-Legacy|V-60185, Vuln-ID|V-259332

Plugin: F5

Control ID: 50f60d91a23ddf376697c212c934d6363260bb99b3f7fe334ab00771db417364