Home
Security Hardening
DISA F5 Big IP Advanced Firewall Manager 11.x STIG V1R1

DISA F5 Big IP Advanced Firewall Manager 11.x STIG V1R1

F5BI-AF-000005 – The BIG-IP AFM module must be configured to enforce approved authorizations for controlling the flow of information within the network based on attribute- and content-based inspection of the source, destination, headers, and/or content of the communications traffic.
Details Information flow control regulates where information is allowed to travel within a network. The flow of all network traffic...
F5BI-AF-000007 – The BIG-IP AFM module must be configured to restrict or block harmful or suspicious communications traffic by controlling the flow of information between interconnected networks based on attribute- and content-based inspection of the source, destination, headers, and/or content of the communications traffic.
Details Information flow control regulates where information is allowed to travel within a network and between interconnected networks. Blocking or...
F5BI-AF-000039 – The BIG-IP AFM module must be configured to produce audit records containing information to establish what type of events occurred.
Details Without establishing what type of event occurred, it would be difficult to establish, correlate, and investigate the events leading...
F5BI-AF-000223 – The BIG-IP AFM module must be configured to only allow incoming communications from authorized sources routed to authorized destinations – Active FW Rules
Details Unrestricted traffic may contain malicious traffic that poses a threat to an enclave or to other connected networks. Additionally,...
F5BI-AF-000223 – The BIG-IP AFM module must be configured to only allow incoming communications from authorized sources routed to authorized destinations – Security Policies
Details Unrestricted traffic may contain malicious traffic that poses a threat to an enclave or to other connected networks. Additionally,...
F5BI-AF-000223 – The BIG-IP AFM module must be configured to only allow incoming communications from authorized sources routed to authorized destinations – Virtual Servers
Details Unrestricted traffic may contain malicious traffic that poses a threat to an enclave or to other connected networks. Additionally,...
F5BI-AF-000229 – The BIG-IP AFM module must be configured to handle invalid inputs in a predictable and documented manner that reflects organizational and system objectives.
Details A common vulnerability of network elements is unpredictable behavior when invalid inputs are received. This requirement guards against adverse...

DISA F5 Big IP Advanced Firewall Manager 11.x STIG V1R1

F5BI-AF-000005 – The BIG-IP AFM module must be configured to enforce approved authorizations for controlling the flow of information within the network based on attribute- and content-based inspection of the source, destination, headers, and/or content of the communications traffic.

F5BI-AF-000039 – The BIG-IP AFM module must be configured to produce audit records containing information to establish what type of events occurred.

F5BI-AF-000223 – The BIG-IP AFM module must be configured to only allow incoming communications from authorized sources routed to authorized destinations – Active FW Rules

F5BI-AF-000223 – The BIG-IP AFM module must be configured to only allow incoming communications from authorized sources routed to authorized destinations – Security Policies

F5BI-AF-000223 – The BIG-IP AFM module must be configured to only allow incoming communications from authorized sources routed to authorized destinations – Virtual Servers

F5BI-AF-000229 – The BIG-IP AFM module must be configured to handle invalid inputs in a predictable and documented manner that reflects organizational and system objectives.