Details
Malicious code protection mechanisms include, but are not limited to, anti-virus and malware detection software. In order to minimize any potential negative impact to the organization caused by malicious code, malicious code must be identified and eradicated. Malicious code includes viruses, worms, Trojan horses, and Spyware.
This requirement is limited to ALGs, web content filters, and packet inspection firewalls that perform malicious code detection as part of their functionality.
NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.
Solution
If the BIG-IP Core performs content filtering as part of the traffic management functionality, configure the BIG-IP ASM module to update malicious code protection mechanisms and signature definitions whenever new releases are available in accordance with organizational configuration management policies and procedures.
Supportive Information
The following resource is also helpful.
This security hardening control applies to the following category of controls within NIST 800-53: System and Information Integrity.This control applies to the following type of system F5.
References
- 800-53|SI-3b.
- CAT|II
- CCI|CCI-001240
- Rule-ID|SV-74501r1_rule
- STIG-ID|F5BI-AS-000109
- Vuln-ID|V-60071