Detections
Analytics

F5BI-DM-000163 - The F5 BIG-IP appliance must be configured to restrict a consistent inbound IP for the entire management session.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

This security measure helps limit the effects of denial-of-service attacks by employing anti-session hijacking security safeguards. Session hijacking, also called cookie hijacking, is the exploitation of a valid computer session to gain unauthorized access to an application. The attacker steals (or hijacks) the cookies from a valid user and attempts to use them for authentication.

Solution

Enable the 'Require A Consistent Inbound IP For The Entire Web Session' setting using the Configuration utility.

From the BIG-IP GUI:
1. System.
2. Preferences.
3. Under 'Security Settings', check 'Require A Consistent Inbound IP For The Entire Web Session'.
4. Click 'Update'.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_F5_BIG-IP_Y24M01_STIG.zip

Item Details

References: CAT|II, CCI|CCI-002385, Rule-ID|SV-259332r947351_rule, STIG-ID|F5BI-DM-000163, STIG-Legacy|SV-74615, STIG-Legacy|V-60185, Vuln-ID|V-259332

Plugin: F5

Control ID: f61c4bdf8c3420f471462c8a64becbaf729883be4c85fc6fad51b54b31fde6bf