F5BI-DM-000031 - The BIG-IP appliance must be configured to enforce the limit of three consecutive invalid logon attempts by a user during a 15-minute time period.

Information

By limiting the number of failed logon attempts, the risk of unauthorized system access via user password guessing, otherwise known as brute-forcing, is reduced.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Configure the BIG-IP appliance to use an approved remote authentication server to enforce the limit of three consecutive invalid logon attempts by a user during a 15-minute time period.

Item Details

Audit Name: DISA F5 BIG-IP Device Management STIG v2r4

Category: ACCESS CONTROL

Plugin: F5

Control ID: dc82f9e8adfb93286bf4d4cc4eae88f77cec5decd2cbc8c6a77af185c9e26708

Detections

Analytics

F5BI-DM-000031 - The BIG-IP appliance must be configured to enforce the limit of three consecutive invalid logon attempts by a user during a 15-minute time period.

Information

Solution

See Also

Item Details