F5BI-DM-000163 - The F5 BIG-IP appliance must be configured to restrict a consistent inbound IP for the entire management session.

Information

This security measure helps limit the effects of denial-of-service attacks by employing anti-session hijacking security safeguards. Session hijacking, also called cookie hijacking, is the exploitation of a valid computer session to gain unauthorized access to an application. The attacker steals (or hijacks) the cookies from a valid user and attempts to use them for authentication.

Solution

Enable the 'Require A Consistent Inbound IP For The Entire Web Session' setting using the Configuration utility.

From the BIG-IP GUI:
1. System.
2. Preferences.
3. Under 'Security Settings', check 'Require A Consistent Inbound IP For The Entire Web Session'.
4. Click 'Update'.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_F5_BIG-IP_Y25M01_STIG.zip

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-5, CAT|II, CCI|CCI-002385, Rule-ID|SV-259332r961620_rule, STIG-ID|F5BI-DM-000163, STIG-Legacy|SV-74615, STIG-Legacy|V-60185, Vuln-ID|V-259332

Plugin: F5

Control ID: 5cc9cf2872fdb22b19e655aae578d948336db5373ab5fbc1c493f14316d90259